---
cve: "CVE-2026-15581"
severity: "HIGH"
cvss: 8.0
epss: "0.4%"
vendor: "Red Hat"
kev: false
exploited: false
published: "2026-08-10 21:17:19"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-11-09T05:43:10+01:00"
---

# CVE-2026-15581

> 8.0 HIGH

## Beschreibung

A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can exploit this to read, tamper with, or delete monitoring data and configurations, and inject arbitrary data into the service, potentially disrupting tenant operations.

## CNA-Record (Kanon, cvelistV5)

- CNA: **redhat**
- State: PUBLISHED
- Stand: 2026-10-12 07:11:35
- CNA-CVSS: **8.0** (`CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **no**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Benachbart | warn |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-306** — Missing Authentication for Critical Functionality
  The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

## Angriffsmuster (CAPEC)

- [CAPEC-12 — Choosing Message Identifier](https://capec.mitre.org/data/definitions/12.html) _(Severity: High)_
- [CAPEC-36 — Using Unpublished Interfaces or Functionality](https://capec.mitre.org/data/definitions/36.html) _(Severity: High)_
- [CAPEC-62 — Cross Site Request Forgery](https://capec.mitre.org/data/definitions/62.html) _(Severity: Very High)_
- [CAPEC-166 — Force the System to Reset Values](https://capec.mitre.org/data/definitions/166.html) _(Severity: Medium)_
- [CAPEC-216 — Communication Channel Manipulation](https://capec.mitre.org/data/definitions/216.html)

## BSI-Hinweise (deutsch)

- [Red Hat OpenShift: Mehrere Schwachstellen](https://wid.cert-bund.de/portal/wid/sicherheitshinweis/WID-SEC-W-2026-2750) — _BSI-Einstufung: hoch_
  Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Dateien zu manipulieren.

## Referenzen

- <https://access.redhat.com/errata/RHSA-2026:53261>
- <https://access.redhat.com/errata/RHSA-2026:53262>
- <https://access.redhat.com/errata/RHSA-2026:53263>
- <https://access.redhat.com/errata/RHSA-2026:60367>
- <https://access.redhat.com/errata/RHSA-2026:60520>
- <https://access.redhat.com/errata/RHSA-2026:65126>
- <https://access.redhat.com/security/cve/CVE-2026-15581>
- <https://bugzilla.redhat.com/show_bug.cgi?id=2499637>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-15581/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_