CVE-2026-18949

Description

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard-s Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to sensitive data like credentials and keys across the entire cluster, and disrupt multi-tenant isolation.