CyberRota Analysis
AI-GeneratedA vulnerability in the Red Hat OpenShift AI MaaS Gateway allows low-privileged users to improperly access and manipulate model traffic, potentially exposing sensitive information such as access keys and input/output data. This flaw poses a high risk of information disclosure and data tampering, making it critical for organizations using RHOAI to prioritize immediate remediation efforts. Security teams should assess their configurations to mitigate the risk associated with this vulnerability.
Original NVD Description
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.