What is CVE-2026-18950?
A vulnerability was discovered in odh-dashboard where an authenticated user can exploit improper validation of the `roleRef` field during RoleBinding creation to specify arbitrary roles, including highly privileged ones like `cluster-admin.` This allows privilege escalation, and immediate patching along with restricted RoleBinding operations is recommended.
Azərbaycanca: CVE-2026-18950 odh-dashboard-da aşkar edilib. Autentifikasiya olunmuş istifadəçi RoleBinding yaradılması zamanı `roleRef` sahəsinin düzgün yoxlanılmaması səbəbindən `cluster-admin` kimi yüksək səlahiyyətli rollar təyin edərək imtiyazlarını artıra bilər. Təhlükəsizlik tədbiri olaraq dərhal odh-dashboard-u yeniləmək və RoleBinding əməliyyatlarını məhdudlaşdırmaq tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-863
FAQ2
What is the nature of CVE-2026-18950?
A privilege escalation vulnerability in odh-dashboard where an authenticated user can assign high-privilege roles like `cluster-admin` due to improper validation of the `roleRef` field during RoleBinding creation.
What mitigation is suggested for CVE-2026-18950?
Immediate patching of odh-dashboard and restricting RoleBinding operations are recommended as security measures.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.