7.1
High
CVE-2026-87114 A flaw was found in kube-compare
Description
A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator's workstation. If the Docker daemon requires elevated privileges, the untrusted code may execute with root-mediated daemon privileges, posing a significant security risk.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pen Drive Powered by Red Hat Lightspeed | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift Container Platform 4.21 1790707362 | earliest → < 1790707362 | 1790707362 |
| Red Hat OpenShift Container Platform 4.22 1790718431 | earliest → < 1790718431 | 1790718431 |
| Red Hat OpenShift Container Platform 4.20 1790707563 | earliest → < 1790707563 | 1790707563 |
| Red Hat OpenShift Container Platform 4.19 1790632105 | earliest → < 1790632105 | 1790632105 |
References
- RHSA-2026:74381 access.redhat.com
- RHSA-2026:74384 access.redhat.com
- RHSA-2026:74430 access.redhat.com
- RHSA-2026:74435 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2522945 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Pen Drive Powered by Red Hat Lightspeed
The 8 CVEs of Pen Drive Powered by Red Hat Lightspeed →
CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
7.1
High
CVE-2026-19391
Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives
6.5
Medium
CVE-2026-15584
A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift
7.5
High
CVE-2026-13083
A flaw was found in the Pen Drive report generator
6.9
Medium