Security Advisory

CVE-2026-18618

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-10 20:45:38

Last updated 2026-08-11 18:48:24

Assigner redhat

CVSS score 7.5

State PUBLISHED

Description

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service (DoS) issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2 requests. This could lead to a denial of service by crashing the MLMD pod, disrupting all pipeline runs in the affected namespace.

← Browse all CVEs View on cve.org ↗