VYPR

Trainer v2

by Red Hat

CVEs (1)

  • CVE-2026-83495Nov 7, 2026
    risk 0.00cvss —epss —

    A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` into environment variable definitions. This allows them to read and exfiltrate sensitive information (secrets) from the namespace,…