{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-15143", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2026-07-08T17:24:00.555Z", "datePublished": "2026-07-10T15:25:09.017Z", "dateUpdated": "2026-10-22T05:09:01.970Z"}, "containers": {"cna": {"title": "Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)", "metrics": [{"other": {"content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services."}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "985c6d5a4a84360ff8b447b94e4a3cdfbda3da90", "versionType": "git"}], "packageName": "guardrails-detectors", "collectionURL": "https://github.com/trustyai-explainability/guardrails-detectors", "defaultStatus": "unaffected"}, {"vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhoai/odh-built-in-detector-rhel9", "defaultStatus": "affected", "versions": [{"version": "1791364320", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"]}, {"vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhoai/odh-guardrails-detector-huggingface-runtime-rhel9", "defaultStatus": "affected", "versions": [{"version": "1791367475", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"]}, {"vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.4", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhoai/odh-built-in-detector-rhel9", "defaultStatus": "affected", "versions": [{"version": "1791537794", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:openshift_ai:3.4::el9"]}, {"vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.4", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhoai/odh-guardrails-detector-huggingface-runtime-rhel9", "defaultStatus": "affected", "versions": [{"version": "1791535841", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:openshift_ai:3.4::el9"]}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:84734", "name": "RHSA-2026:84734", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:87410", "name": "RHSA-2026:87410", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2026-15143", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498165", "name": "RHBZ#2498165", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2026-07-10T09:19:44.546Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "description": "Server-Side Request Forgery (SSRF)", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)", "timeline": [{"lang": "en", "time": "2026-06-26T12:47:42.862Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-07-10T09:19:44.546Z", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-22T05:09:01.970Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-10T15:42:19.456726Z", "id": "CVE-2026-15143", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-10T15:46:37.212Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-15143", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-10T15:42:19.456726Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-10T15:46:28.870Z"}}], "cna": {"title": "Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "985c6d5a4a84360ff8b447b94e4a3cdfbda3da90", "versionType": "git"}], "packageName": "guardrails-detectors", "collectionURL": "https://github.com/trustyai-explainability/guardrails-detectors", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "versions": [{"status": "unaffected", "version": "1791364320", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-built-in-detector-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "versions": [{"status": "unaffected", "version": "1791367475", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-guardrails-detector-huggingface-runtime-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:3.4::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.4", "versions": [{"status": "unaffected", "version": "1791537794", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-built-in-detector-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:3.4::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.4", "versions": [{"status": "unaffected", "version": "1791535841", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-guardrails-detector-huggingface-runtime-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2026-06-26T12:47:42.862Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-07-10T09:19:44.546Z", "value": "Made public."}], "datePublic": "2026-07-10T09:19:44.546Z", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:84734", "name": "RHSA-2026:84734", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:87410", "name": "RHSA-2026:87410", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2026-15143", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498165", "name": "RHBZ#2498165", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-22T05:09:01.970Z"}, "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"}}, "cveMetadata": {"cveId": "CVE-2026-15143", "state": "PUBLISHED", "dateUpdated": "2026-10-22T05:09:01.970Z", "dateReserved": "2026-07-08T17:24:00.555Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2026-07-10T15:25:09.017Z", "assignerShortName": "redhat"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://github.com/trustyai-explainability/guardrails-detectors", "defaultStatus": "unaffected", "packageName": "guardrails-detectors", "versions": [{"lessThan": "985c6d5a4a84360ff8b447b94e4a3cdfbda3da90", "status": "affected", "version": "0", "versionType": "git"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-built-in-detector-rhel9", "product": "Red Hat OpenShift AI 2.25", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1791364320", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-guardrails-detector-huggingface-runtime-rhel9", "product": "Red Hat OpenShift AI 2.25", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1791367475", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:3.4::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-built-in-detector-rhel9", "product": "Red Hat OpenShift AI 3.4", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1791537794", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:3.4::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-guardrails-detector-huggingface-runtime-rhel9", "product": "Red Hat OpenShift AI 3.4", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1791535841", "versionType": "rpm"}]}], "source": "secalert@redhat.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en el detector de contenido file_type de guardrails-detectors. Esta vulnerabilidad permite a un atacante remoto suministrar una cadena de Definici\u00f3n de Esquema XML (XSD) arbitraria, que se procesa sin las restricciones adecuadas. Esto puede conducir a solicitudes del lado del servidor a URL arbitrarias o lecturas de archivos locales, lo que podr\u00eda resultar en revelaci\u00f3n de informaci\u00f3n sensible, como credenciales de proveedores de la nube o acceso a servicios de red internos."}], "id": "CVE-2026-15143", "lastModified": "2026-10-25T15:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.7, "source": "secalert@redhat.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15143", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-10T15:42:19.456726Z", "version": "2.0.3"}}]}, "published": "2026-07-10T16:16:25.680", "references": [{"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2026:84734"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2026:87410"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2026-15143"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498165"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "secalert@redhat.com", "type": "Secondary"}]}

{"bugzilla": {"description": "guardrails-detectors: guardrails-detectors: SSRF and local file read via user-supplied XML Schema (xml-with-schema:)", "id": "2498165", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498165"}, "csaw": false, "cvss3": {"cvss3_base_score": "9.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "status": "draft"}, "cwe": "CWE-918", "details": ["A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services."], "name": "CVE-2026-15143", "package_state": [{"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-built-in-detector-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-guardrails-detector-huggingface-runtime-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}], "public_date": "2026-07-10T09:19:44Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-15143\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-15143"], "statement": "This vulnerability is rated as Important. It allows an attacker with network access to the detector service to perform Server-Side Request Forgery (SSRF) and local file reads. This is due to the guardrails-detectors component accepting arbitrary XML Schema Definition (XSD) strings, which are then processed by the xmlschema library without restricting external schemaLocation references. This could lead to credential theft or access to internal services.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Red Hat OpenShift AI (RHOAI)", "source": "cna", "vendor": "Red Hat"}, "product": "red_hat_openshift_ai_(rhoai)", "vendor": "red_hat"}], "created": "2026-07-11T11:00:06.123173+00:00", "updated": "2026-09-29T10:45:16.002403+00:00", "vendors": ["red_hat", "red_hat$PRODUCT$red_hat_openshift_ai_(rhoai)"]}