Описание
A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.
Отчет
This is an Important vulnerability in Red Hat OpenShift AI (RHOAI) and Data Science Pipelines Operator (DSPO) that allows a namespace editor to achieve node-root privileges. This occurs because the V1 Argo template path, still active in RHOAI/DSPO deployments, bypasses security hardening applied by the v2 compiler. Exploitation leverages a confused deputy scenario where the API server creates a malicious Workflow CR on behalf of the submitter, enabling privileged pod creation in namespaces configured with GPU operators or anyuid/privileged SCCs.
Меры по смягчению последствий
To mitigate this issue, ensure that Data Science Project (DSP) namespaces enforce pod-security.kubernetes.io/enforce: restricted. Additionally, verify that the pipeline-runner ServiceAccount is not bound to privileged or anyuid Security Context Constraints (SCCs).
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat AI Inference Server | rhaiis/vllm-cpu-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaiis/vllm-cuda-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaiis/vllm-neuron-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaiis/vllm-rocm-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaiis/vllm-spyre-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaiis/vllm-tpu-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaii/vllm-cpu-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaii/vllm-cuda-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaii/vllm-gaudi-rhel9 | Under investigation | ||
| Red Hat AI Inference Server | rhaii/vllm-neuron-rhel9 | Under investigation |
Показывать по
Дополнительная информация
Статус:
EPSS
7.6 High
CVSS3
Связанные уязвимости
A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.
A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.
EPSS
7.6 High
CVSS3