CVE-2026-15154

[CVE catalog]

Severity

Medium · CVSS 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Published

Jul 8, 2026, 6:43:36 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.48% · Oct 25, 2026

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline. guardrails-detectors: guardrails-detectors: Unauthenticated Regular-Expression Denial of Service (ReDoS) via detector_params.regex This Moderate impact vulnerability in `guardrails-detectors` within Red Hat OpenShift AI allows an unauthenticated attacker on an adjacent network to trigger a Regular Expression Denial of Service (ReDoS). By sending a crafted regular expression to the public detection API, an attacker can consume worker processes indefinitely, leading to a denial of service for the guardrails-mediated LLM pipeline or a bypass of guardrail protections. Exploitation requires network adjacency, as end-users do not directly interact with the vulnerable API. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.