{"id":"CVE-2026-83494","published":"2026-11-06T07:17:57.210","lastModified":"2026-11-06T07:18:00.937","description":"A flaw was found in the training-operator. An incorrect object casting in the PyTorchJob ValidateUpdate webhook allows users to bypass an immutability check. This vulnerability could enable users to detach a queued job from its quota management system or hijack a running job's controller ownership. The primary impact is a Denial of Service (DoS) condition.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-693"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-83494","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526348","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}