NVD Published: 2026-09-28
Preface: Reference to attached infographic, if the compromised container requires direct interaction with specialized host hardware components (NVIDIA DGX B200 GPUs & ConnectX-7 interfaces), malware can leverage custom syscall and ioctl streams to target low-level kernel drivers. Exploiting flaws in these driver paths could allow a total Container Escape, granting full root access to the underlying bare-metal infrastructure.
Background: The primary design objective of the Multicloud Object Gateway (MCG)—powered by NooBaa technology in OpenShift Data Foundation (ODF)—is to provide a lightweight, S3-compatible object storage abstraction layer that unifies and manages unstructured data across hybrid and multi-cloud environments.
The Multicloud Object Gateway (MCG) plays a critical role in AI/LLM workloads on OpenShift. Rather than operating as an AI model itself, MCG functions as the fundamental cloud-native data layer that feeds, caches, and organizes the unstructured data required by Large Language Models (LLMs) and Red Hat OpenShift AI (RHOAI) pipelines.
About the work process:
OpenShift AI / LLM Workflow Layer > MCG Storage Abstraction Layer (Control & Data Plane) > Hybrid & Multi-Cloud BackingStores (The Physical Data)
Besides, Hybrid & Multi-Cloud BackingStores (The Physical Data) whether cope with NVIDIA DGX 200 ?
The OpenShift AI layer makes requests via an object bucket claim, the MCG abstraction layer handles the logic (caching, mirroring, security), and the physical storage operations take place inside the Hybrid & Multi-Cloud BackingStores.
Do BackingStores Cope with NVIDIA DGX Servers?
Yes, absolutely.
Vulnerability details: An OS command injection flaw was found in the set_hostname_internal function of NooBaa’s cluster_internal_api. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell command without proper sanitization. An authenticated attacker with administrative privileges can provide a specially crafted hostname containing shell metacharacters to execute arbitrary commands on the host system with the privileges of the NooBaa process.
Remediation: Because NooBaa is the core component managing the Multi-Cloud Object Gateway in Red Hat OpenShift Data Foundation, the official fix is distributed through Red Hat’s native channel updates.
Official announcement: Please refer to the link for details –