Issued:

2026-07-09

Updated:

2026-07-09

RHSA-2026:37278 - RHTAS 1.4.2 - Tech Preview Release Of the Go based Model Transparency CLI

Synopsis

RHTAS 1.4.2 - Tech Preview Release Of the Go based Model Transparency CLI

Type/Severity

Security Advisory Important

Topic

The Tech Preview release of the Go based RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4

Description

The Go based RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads

Solution

The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).

For details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4

Affected Products

Fixes

(none)

CVEs

• CVE-2026-39828
• CVE-2026-39829
• CVE-2026-39830

References

• https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at Security Contacts and Procedures.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.