AI Security
Search K

Appearance

August 25, 2026 - Operator - Helm chart 1.8.0 / Red Hat Ecosystem Catalog 0.12.0 ​

This release includes updates in the following areas for the F5 AI Security Operator:

Operator versions ​

DistributionVersion
Helm chart (f5-ai-security-operator-helm)1.8.0
Red Hat Ecosystem Catalog (operator bundle)0.12.0

OpenShift compatibility note ​

WARNING

GPU Operator v25.10.0+ enables Container Device Interface (CDI) mode by default. On OpenShift/RHCOS nodes running CRI-O with crun older than 1.26, this causes inference pods with a read-only root filesystem to fail to start. The root cause is a known crun issue, fixed by crun PR #1925.

Upgrading to OCP 4.21.28 or later resolves this (ships crun 1.27+). Check your node's crun version with:

bash
oc debug node/<node> -- chroot /host crun --version

Because crun is provided and managed as part of the OpenShift/RHCOS platform, work with Red Hat to upgrade to a supported OpenShift/RHCOS release that includes this fix. Do not manually replace the crun binary on production OpenShift nodes.

If you can't upgrade OCP yet, disable CDI in ClusterPolicy as a workaround:

bash
oc patch clusterpolicy gpu-cluster-policy --type=merge -p '{"spec":{"cdi":{"enabled":false}}}'

Changes to default behavior ​

This release has the following changes to default behavior:

  • Hardened, restricted-v2-compatible inference images

    The guardrails, red team, and remediate model images have been hardened (dropped capabilities, non-root execution). They now run under OpenShift's built-in restricted-v2 SCC. The operator no longer creates or requires a custom SCC for inference pods.

Security updates ​

This release resolves the following CVEs in operator dependencies:

  • A DNS parsing panic (CVE-2026-46600) and an IDNA hostname-spoofing issue (CVE-2026-39821) in golang.org/x/net.
  • An AES-GCM decoder crash (CVE-2026-46597) and a certificate revocation check gap (CVE-2026-42508) in golang.org/x/crypto.
  • A PATH-hijacking vulnerability (CVE-2026-39883) in go.opentelemetry.io/otel.
  • A path-traversal vulnerability (CVE-2026-50163) in oras.land/oras-go/v2.

The operator's Go toolchain has also been upgraded from 1.24 to 1.25.

Updated at: