Описание
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates trainjobs management permissions into the native Kubernetes edit ClusterRole. This allows any user with edit ClusterRole permissions in a namespace to create, modify, and delete TrainJobs. When combined with a separate vulnerability (TRN-01) that permits arbitrary pod configurations, a remote attacker with namespace editor privileges could exploit this to escalate privileges, potentially leading to arbitrary code execution.
Отчет
This Critical vulnerability in Red Hat OpenShift AI (RHOAI) arises from the RHOAI overlay aggregating trainjobs CRUD operations into the native Kubernetes edit ClusterRole. This implicit permission grant allows any namespace editor to create, modify, and delete TrainJobs, significantly widening the attack surface for privilege escalation when combined with other vulnerabilities like PodSpec passthrough. This issue is specific to the RHOAI fork and not present in upstream Kubeflow trainer.
Меры по смягчению последствий
Administrators should review and adjust their Kubernetes RBAC configurations within Red Hat OpenShift AI to ensure that trainjobs permissions are explicitly managed. This involves removing trainjobs from the aggregate-to-edit ClusterRole labels or requiring explicit RoleBinding for trainjobs access. This prevents implicit permission grants to namespace editors and reduces the attack surface. Consult Kubernetes documentation for specific instructions on modifying ClusterRoles and RoleBindings. A restart or reload of affected components may be required for changes to take effect.
Дополнительная информация
Статус:
EPSS
8.8 High
CVSS3
Связанные уязвимости
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJobs`. When combined with a separate vulnerability (TRN-01) that permits arbitrary pod configurations, a remote attacker with namespace editor privileges could exploit this to escalate privileges, potentially leading to arbitrary code execution.
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJobs`. When combined with a separate vulnerability (TRN-01) that permits arbitrary pod configurations, a remote attacker with namespace editor privileges could exploit this to escalate privileges, potentially leading to arbitrary code execution.
EPSS
8.8 High
CVSS3