CVE-2026-83494
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-11-06
Modified: 2026-11-06
First seen: 2026-11-06
Status: pending_score
Description
A flaw was found in the training-operator. An incorrect object casting in the PyTorchJob ValidateUpdate webhook allows users to bypass an immutability check. This vulnerability could enable users to detach a queued job from its quota management system or hijack a running job's controller ownership. The primary impact is a Denial of Service (DoS) condition.
Weakness Classification (1)
References & Advisories (2)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT