CVE-2026-86332: Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated odh-dashboard user can exploit it. Administrator privileges are not required for the affected read path, even though creating and deleting the NIM credential are admin-gated.
What credentials can be exposed?
The route can return the full Kubernetes Secret object, including its .data field. This can expose the cluster NVIDIA NGC API key secret (apiKeySecret) and the NIM image pull secret (nimPullSecret).
What access does an attacker need?
An attacker needs an authenticated dashboard session and access to the GET /api/nim-serving/:nimResource route. No user interaction or elevated Kubernetes permissions are described as necessary.
How can we determine whether the vulnerable behavior is present?
Check whether an authenticated non-admin dashboard user can call GET /api/nim-serving/:nimResource and receive a full Secret object containing .data. Exposure of apiKeySecret or nimPullSecret through that response indicates the issue.