CVE-2026-34940
KubeAI has an OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods
HIGH 8.8EPSS 0.5%
KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam). This shell command is executed via bash -c as a Kubernetes startup probe. An attacker who can create or update Model custom resources can inject arbitrary shell commands that execute inside model server pods. This vulnerability is fixed in 0.23.2.
- Affected
- kubeai-project · kubeai
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 GITHUB
- 8.7 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N - EPSS
- 0.51% chance of exploitation in the next 30 days, 42nd percentile
- Published
- 2026-04-06
- Updated
- 2026-04-16
Proof-of-concept exploits (2)
- advisories/GHSA-324q-cwx9-7crr
- romain-deperne/CVE-2026-349400★ · 2026-09-07