AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-15143

Red Hat file_type content: information disclosure

Red Hat

CVE-2026-15143 · Published Jul 10, 2026 · updated Aug 31, 2026

Critical9.3
Fix: upgrade to Red Hat or later (2 fixed versions below)
Red Hat advisory

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

Affected versions

PackageAffectedFixed in
Red Hat OpenShift AI (RHOAI)
Product
all versionsNo fix yet
all versionsNo fix yet
Red Hat, Inc.: CVE records (CNA)
Product
< 985c6d5a4a84360ff8b447b94e4a3cdfbda3da90985c6d5a4a84360ff8b447b94e4a3cdfbda3da90
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More Red Hat advisories

All Red Hat