{"affected":[{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-trainer-rhel9","product":"Red Hat OpenShift AI (RHOAI)","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-83495","cwes":["CWE-269"],"description":"A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` into environment variable definitions. This allows them to read and exfiltrate sensitive information (secrets) from the namespace, leading to a privilege escalation. This occurs when the TrainJob Role-Based Access Control (RBAC) is broader than the Secret read RBAC.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794031337419,"publishedAt":1794031337419,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-83495"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526350"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"To mitigate this vulnerability, ensure that the Role-Based Access Control (RBAC) for users creating TrainJobs is aligned with their Secret read permissions. Alternatively, restrict the `valueFrom.secretKeyRef` field within the validating webhook to an allowlist of permitted secret names. Review and adjust RBAC policies to prevent users from creating TrainJobs with broader access to Secrets than intended."}],"revision":"efb32438e0d18f5fca03c7e9442327f9b74a5ddc2876bf75b06540014127ccd3","sources":[{"modifiedAt":1794031337419,"name":"CNA: redhat","retrievedAt":1794035403019,"url":"https://www.cve.org/CVERecord?id=CVE-2026-83495"}],"ssvc":null,"status":"published","title":"Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration","updatedAt":1794035403019}