Data Science Pipelines Operator Credential Disclosure Vulnerability

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: Red Hat, Inc.

Description

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the operator uses a cryptographically weak pseudo-random number generator (PRNG) to generate these credentials, making them predictable. Successful exploitation could lead to unauthorized access to all pipeline artifacts and metadata, resulting in significant information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-10

Generated

2026-08-11

AI Q&A

2026-08-11

EPSS Evaluated

N/A

NVD

CVE-2026-18611

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	data_science_pipelines_operator	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-338	The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

Attack-Flow Graph

Executive Summary

This vulnerability is in the Data Science Pipelines Operator. An unauthenticated attacker who can access the MinIO Route or MariaDB Service can derive sensitive credentials like MariaDB root/user passwords and MinIO access/secret keys. The issue stems from the operator using a weak cryptographically pseudo-random number generator (PRNG) to create these credentials, making them predictable.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to all pipeline artifacts and metadata. This may lead to significant information disclosure, as attackers could view or steal sensitive data stored in the pipelines.

Mitigation Strategies

Update the Data Science Pipelines Operator to the latest version that fixes the weak PRNG issue. Ensure MinIO Route and MariaDB Service are not exposed to untrusted networks. Rotate all derived credentials immediately if they may have been exposed.

Hi! I’m here to help you understand CVE-2026-18611. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70