CVE-2026-15574

{"id": "CVE-2026-15574", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15574", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-13T14:41:50.451291Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "versions": [{"status": "unaffected", "version": "1790929477", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-trustyai-vllm-orchestrator-gateway-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:3.4::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.4", "versions": [{"status": "unaffected", "version": "1791363252", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-trustyai-vllm-orchestrator-gateway-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}]}], "published": "2026-07-13T09:16:24.550", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:84734", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:87410", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-15574", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499594", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-538"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorization headers and full chat payloads, which may contain personally identifiable information (PII) and secrets, to persistent logs. This sensitive data, including bearer tokens and chat content, can be accessed by any user with logging privileges. This vulnerability leads to information disclosure, potentially allowing an attacker to harvest credentials and sensitive conversation content."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en el componente vllm-orchestrator-gateway. El binario de producci\u00f3n del sistema registra todos los encabezados de autorizaci\u00f3n entrantes y las cargas \u00fatiles completas del chat, que pueden contener informaci\u00f3n de identificaci\u00f3n personal (PII) y secretos, en registros persistentes. Estos datos sensibles, incluyendo tokens de portador y contenido de chat, pueden ser accedidos por cualquier usuario con privilegios de registro. Esta vulnerabilidad conduce a la revelaci\u00f3n de informaci\u00f3n, permitiendo potencialmente a un atacante recolectar credenciales y contenido de conversaci\u00f3n sensible."}], "lastModified": "2026-10-24T22:10:00.210", "sourceIdentifier": "secalert@redhat.com"}