CVE-2026-34940 Details
Description
KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam). This shell command is executed via bash -c as a Kubernetes startup probe. An attacker who can create or update Model custom resources can inject arbitrary shell commands that execute inside model server pods. This vulnerability is fixed in 0.23.2.
A command injection vulnerability has been identified in KubeAI versions prior to 0.23.2. The issue arises in the Ollama engine's startup probe, where the 'ollamaStartupProbeScript()' function constructs a shell command using unsanitized model URL components. This command is executed in model server pods as part of the Kubernetes startup probe. An attacker with the ability to create or update Model custom resources can inject arbitrary shell commands that are executed inside the pods.
Users are advised to update KubeAI to version 0.23.2 or later. For those unable to update, consider validating or sanitizing model URL components before they are used in shell commands.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/kubeai-project/kubeai/security/advisories/GHSA-324q-cwx9-7crr | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/kubeai-project/kubeai/security/advisories/GHSA-324q-cwx9-7crr | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| kubeai kubeai | < 0.23.2 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 15, 2026 | CVE Modified | [email protected] |
| Apr 14, 2026 | Initial Analysis | [email protected] |
| Apr 7, 2026 | CVE Modified | CISA-ADP |
| Apr 6, 2026 | New CVE Received | [email protected] |