CVE-2026-18611

Awaiting Analysis Awaiting Analysis - Queue

Data Science Pipelines Operator Credential Disclosure Vulnerability

Publication date: 2026-08-10

Last updated on: 2026-08-27

Assigner: redhat-SADP

Description

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the operator uses a cryptographically weak pseudo-random number generator (PRNG) to generate these credentials, making them predictable. Successful exploitation could lead to unauthorized access to all pipeline artifacts and metadata, resulting in significant information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-27

Generated

2026-08-31

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-29

NVD

CVE-2026-18611

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	data_science_pipelines_operator	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-338	The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

Attack-Flow Graph

Executive Summary

This vulnerability is in the Data Science Pipelines Operator. An unauthenticated attacker who can access the MinIO Route or MariaDB Service can derive sensitive credentials like MariaDB root/user passwords and MinIO access/secret keys. The issue stems from the operator using a weak cryptographically pseudo-random number generator (PRNG) to create these credentials, making them predictable.

Detection Guidance

This vulnerability cannot be directly detected through commands as it stems from a design flaw in credential generation. However, you can check for exposed MinIO Routes or MariaDB Services in your cluster, as these are required for exploitation. Use commands like 'oc get routes' or 'oc get services' in OpenShift to identify such resources.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to all pipeline artifacts and metadata. This may lead to significant information disclosure, as attackers could view or steal sensitive data stored in the pipelines.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, including pipeline artifacts and metadata. This may result in violations of GDPR (due to unauthorized access to personal data) and HIPAA (due to exposure of protected health information), as attackers could derive credentials to access confidential information.

Mitigation Strategies

Update the Data Science Pipelines Operator to the latest version that fixes the weak PRNG issue. Ensure MinIO Route and MariaDB Service are not exposed to untrusted networks. Rotate all derived credentials immediately if they may have been exposed.

Hi! I’m here to help you understand CVE-2026-18611. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70