{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "incident": {
    "id": "cve-2026-117574",
    "url": "https://cveboard.org/i/cve-2026-117574",
    "urlPt": "https://cveboard.org/pt/i/cve-2026-117574",
    "json": "https://cveboard.org/i/cve-2026-117574.json",
    "kind": "vuln",
    "live": true,
    "knownExploited": false,
    "severity": "critical",
    "title": "Red Hat Red Hat OpenShift AI (RHOAI)",
    "summary": "A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header.",
    "titlePt": "Red Hat Red Hat OpenShift AI (RHOAI)",
    "summaryPt": "Foi encontrado um problema no ai-gateway-payload-processing. Um atacante remoto autenticado pode explorar essa vulnerabilidade enviando uma solicitação que especifique o identificador do modelo de outro inquilino no corpo ou no cabeçalho da solicitação.",
    "affected": [
      {
        "vendor": "Red Hat",
        "product": "Red Hat OpenShift AI (RHOAI)",
        "defaultStatus": "unaffected",
        "versions": [],
        "omitted": 0,
        "fixed": []
      },
      {
        "vendor": "Red Hat",
        "product": "Red Hat OpenShift AI (RHOAI)",
        "defaultStatus": "affected",
        "versions": [],
        "omitted": 0,
        "fixed": []
      }
    ],
    "omitted": 0,
    "references": [],
    "cwes": [
      {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      }
    ],
    "ssvc": null,
    "fix": "none",
    "tags": [
      "red-hat"
    ],
    "description": "A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.",
    "descriptionFrom": "cve",
    "descriptionAt": null,
    "summaryFrom": "cve",
    "cves": [
      "CVE-2026-117574"
    ],
    "ghsa": null,
    "cvss": {
      "score": 9.1,
      "version": "3.1",
      "by": "redhat"
    },
    "epss": null,
    "packages": [],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "kev": null,
    "breach": null,
    "retracted": false,
    "sources": [
      {
        "label": "cve.now",
        "url": "https://cve.now/CVE-2026-117574"
      }
    ],
    "cveVersion": 1,
    "cvePending": false,
    "publishedAt": "2026-10-28T20:02:14.895Z",
    "updatedAt": "2026-10-28T20:02:14.895Z"
  },
  "live": true,
  "events": [
    {
      "id": "cvenow:CVE-2026-117574:cvenow_discovered:first",
      "incidentId": "cve-2026-117574",
      "type": "cvenow_discovered",
      "at": "2026-10-28T20:02:14.895Z",
      "detail": {}
    }
  ]
}