Description
A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | trustyAI | ≤ 1.38 | — |
| Red Hat | Red Hat OpenShift AI 2.16 | — | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — |
References
- RHSA-2026:5807 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-6193 vdb-entry
- RHBZ#2374032 issue-tracking
- https://github.com/trustyai-explainability/trustyai-service-operator/pull/504