CVE-2026-18949

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in odh-dashboard via SA Token

Publication date: 2026-08-10

Last updated on: 2026-08-14

Assigner: redhat-SADP

Description

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to sensitive data like credentials and keys across the entire cluster, and disrupt multi-tenant isolation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-14

Generated

2026-08-31

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-29

NVD

CVE-2026-18949

Affected Vendors & Products

Vendor	Product	Version / Range
odh_dashboard	odh_dashboard	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-250	The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Attack-Flow Graph

Executive Summary

This vulnerability is in odh-dashboard. If an attacker gains access to the dashboard's Service Account token, they can exploit overly broad permissions to escalate privileges to cluster-administrator level. This allows access to sensitive data like credentials and keys across the entire cluster and disrupts multi-tenant isolation.

Detection Guidance

Detection requires checking for overly broad permissions assigned to the odh-dashboard Service Account (SA) token. Inspect SA token roles and cluster-wide permissions using commands like 'kubectl get serviceaccount -n <namespace>' and 'kubectl get clusterrolebindings'. Look for excessive privileges such as cluster-admin or broad data access roles.

Impact Analysis

An attacker could gain full control over the cluster, steal sensitive data such as credentials and keys, and disrupt operations. This could lead to data breaches, unauthorized access to other tenants' resources, and potential service disruptions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Compliance failures may result in legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Review and restrict Service Account (SA) token permissions to the minimum required. Audit all SA tokens for excessive privileges and revoke unnecessary access. Monitor cluster activity for unauthorized privilege escalation attempts.

Hi! I’m here to help you understand CVE-2026-18949. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70