AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-15154

Red Hat, Inc.: CVE records (CNA): denial of service

Red Hat

CVE-2026-15154 · Published Jul 8, 2026 · updated Sep 30, 2026

Medium6.5
Fix: upgrade to Red Hat or later (2 fixed versions below)
Red Hat advisory

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline.

Affected versions

PackageAffectedFixed in
Red Hat, Inc.: CVE records (CNA)
Product
< d857e059f8a2dedb5c7ea9a2c307c4cfd7983fd1d857e059f8a2dedb5c7ea9a2c307c4cfd7983fd1
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-1333

More Red Hat advisories

All Red Hat
Medium 6.3Jul 8Red Hat gorch service template: missing authenticationCVE-2026-15063no fix yetMedium 6.3Jul 8Red Hat TrustyAI Service Operator.: information disclosureCVE-2026-15044no fix yetLow 3.7Jul 8A flaw was found in 389 Directory ServerCVE-2026-15041no fix yetMedium 6.5Jul 7Red Hat Jastow: cross-site scriptingCVE-2025-12799no fix yetLow 3.7Jul 7Red Hat GStreamer: incorrect control flowCVE-2026-14935no fix yetMedium 4.4Jul 7Red Hat 389-ds-base: attacker could detect plaintext equality across encryptedCVE-2026-14969no fix yet