{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://github.com/trustyai-explainability/guardrails-detectors","packageName":"guardrails-detectors","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThan":"985c6d5a4a84360ff8b447b94e4a3cdfbda3da90","status":"affected","version":"0","versionType":"git"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"rhoai/odh-built-in-detector-rhel9","product":"Red Hat OpenShift AI 2.25","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791364320","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"rhoai/odh-guardrails-detector-huggingface-runtime-rhel9","product":"Red Hat OpenShift AI 2.25","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791367475","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"rhoai/odh-built-in-detector-rhel9","product":"Red Hat OpenShift AI 3.4","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791537794","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"rhoai/odh-guardrails-detector-huggingface-runtime-rhel9","product":"Red Hat OpenShift AI 3.4","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791535841","versionType":"rpm"}]}],"cveId":"CVE-2026-15143","cwes":["CWE-918"],"description":"A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.","epss":{"date":"2026-11-10","percentile":0.45522,"score":0.00536},"exploits":[],"kev":null,"metrics":[{"score":9.3,"severity":"critical","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","version":"3.1"}],"modifiedAt":1794328989261,"publishedAt":1783697109017,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:87410"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-15143"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2498165"}],"remediation":[],"revision":"7a7ff919ea58813907bb55f23d6d5c0549770c17adedff60cb97829e8a8a72f7","sources":[{"modifiedAt":1794328989261,"name":"CNA: redhat","retrievedAt":1794330679138,"url":"https://www.cve.org/CVERecord?id=CVE-2026-15143"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794330695886,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-15143"}],"ssvc":{"assessedAt":1783698139456,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)","updatedAt":1794330695886}