CVE-2026-15154
Medium
Description
A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Redhat Openshift Ai
PublishedJul 8, 2026
First seenJul 8, 2026
Weakness typeCWE-1333CWE-1333
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat openshift_ai | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.