CVE-2026-15063

{
  "id": "CVE-2026-15063",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-08T16:16:27.723",
  "lastModified": "2026-10-25T20:10:00.147",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrator and detector metrics ports. This allows any pod on the cluster network to directly access these ports, bypassing the kube-rbac-proxy and its authentication mechanisms. This could lead to unauthorized access to the orchestrator and detector metrics."
    },
    {
      "lang": "es",
      "value": "Se encontró una falla en la plantilla del servicio gorch, que forma parte del trustyai-service-operator. Incluso cuando la autenticación está habilitada, el servicio gorch expone puertos de métricas de orquestador y detector sin proxy. Esto permite a cualquier pod en la red del clúster acceder directamente a estos puertos, eludiendo el kube-rbac-proxy y sus mecanismos de autenticación. Esto podría llevar a un acceso no autorizado a las métricas del orquestador y del detector."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "trustyai-explainability",
          "product": "trustyai-service-operator",
          "defaultStatus": "unaffected",
          "collectionURL": "https://github.com/trustyai-explainability/trustyai-service-operator",
          "packageName": "trustyai-service-operator",
          "versions": [
            {
              "version": "0",
              "lessThan": "*",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "defaultStatus": "affected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
          "baseScore": 6.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 4.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-08T15:56:03.613145Z",
          "id": "CVE-2026-15063",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://access.redhat.com/security/cve/CVE-2026-15063",
      "source": "[email protected]"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498058",
      "source": "[email protected]"
    }
  ]
}