CVE-2026-83494 | BDVDB-2026-400993 Detail

Red HatRed Hat OpenShift AI (RHOAI)

Description#

A flaw was found in the training-operator. An incorrect object casting in the PyTorchJob ValidateUpdate webhook allows users to bypass an immutability check. This vulnerability could enable users to detach a queued job from its quota management system or hijack a running job's controller ownership. The primary impact is a Denial of Service (DoS) condition.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-693 Protection Mechanism Failure

References#

https://access.redhat.com/security/cve/CVE-2026-83494
https://bugzilla.redhat.com/show_bug.cgi?id=2526348

Exploit#

No public exploit known

History#

Version 12026-11-06Record published in the CVE List.