https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T19:35:02.009175+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-83494 CVE-2026-83494 — Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; u… 2026-11-13T19:35:02.010288+00:00

Affected: Red Hat OpenShift AI (RHOAI)

A flaw was found in the training-operator. An incorrect object casting in the PyTorchJob ValidateUpdate webhook allows users to bypass an immutability check. This vulnerability could enable users to detach a queued job from its quota management system or hijack a running job's controller ownership. The primary impact is a Denial of Service (DoS) condition.