Red Hat AI gateway cross-tenant model credential-use advisory

Evidence record

GitHub advisory mirroring CVE-2026-117574; version status and fix not yet established.

Read the original source ↗

Claim-level citations (2)

• supportsRed Hat AI gateway could route another tenant’s model request using their API key: CVE-2026-117574 describes an AI gateway model-identifier authorization failure that can select another tenant’s provider credential for inference; the public advisory alone does not confirm a particular repaired container digest.

  CVE-2026-117574, GHSA-4c29-j43w-vg8g: another tenant model identifier and shared credential lookup

• supportsRed Hat AI gateway could route another tenant’s model request using their API key: A Red Hat AI gateway component selected stored model credentials using a model identifier supplied by an authenticated caller without validating the model’s tenant ownership. The requester needed gateway authentication and knowledge or choice of another tenant model identifier; affected builds and patched versions were not established. A request could consume another tenant’s model-provider API credentials through the gateway, potentially charging or using the wrong account.

  CVE-2026-117574, GHSA-4c29-j43w-vg8g: another tenant model identifier and shared credential lookup