Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-17557 EUVD-2026-107135GHSA-xphj-jg67-vf2w

Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding

Published Oct 21, 2026 · Updated Oct 21, 2026 · Assigned by redhat

Description

A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the `JobSpec`. This vulnerability allows for the disclosure of the tenant's model authentication secret to an attacker-controlled external listener. Additionally, it enables Server-Side Request Forgery (SSRF) attacks against internal network endpoints reachable from the evaluation job pod.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat OpenShift AI (RHOAI) — —

References