Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-15154 EUVD-2026-42382GHSA-jm96-7wvj-j3r9

Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

Published Jul 8, 2026 · Updated Sep 30, 2026 · Assigned by redhat

Description

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline.

Affected products

VendorProductAffectedFixed
— guardrails-detectors — —
Red Hat Red Hat OpenShift AI 2.25 — —
Red Hat Red Hat OpenShift AI 3.3 — —
Red Hat Red Hat OpenShift AI 3.4 — —

Advisories 1

References