NVD HIGH: CVE-2026-18950 — A flaw was found in odh-dashboard. An authenticated user of the dashboard can ex...

Monday, August 10, 2026 at 09:17 PM UTC·Source: NIST NVD

Updated: Tuesday, August 11, 2026 at 04:00 AM UTC

Executive Summary

A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the `roleRef` field, allowing a user to specify an arbitrary role, including highly privileged ones like `cluster-admin`. This can lead to privilege escalation, where an attacker gains unauthorized elevated access withi

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-18950

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 10, 2026. Verified by: NIST.

Related Threats

HIGHVulnerabilityNEWPOC

Hackers exploit macOS Screen Sharing flaw to deploy Monero miner

The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged. [...]

36m agoBleepingComputer

MEDIUMVulnerabilityNEW

Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations

Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents

47m agoInfosecurity Magazine

MEDIUMVulnerability

JPMorgan debanked Polymarket - FT

JPMorgan Chase ended its banking relationship with prediction market Polymarket last year over regulatory concerns, according to the Financial Times.

1h agoFinextra