7.4
High
CVE-2026-50237 A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy
Description
A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata poisoning and admin-mediated chart installation, this enables privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift Container Platform 4.12 1786511587 | earliest → < 1786511587 | 1786511587 |
| Red Hat OpenShift Container Platform 4.13 1786477760 | earliest → < 1786477760 | 1786477760 |
| Red Hat OpenShift Container Platform 4.14 1787056403 | earliest → < 1787056403 | 1787056403 |
| Red Hat OpenShift Container Platform 4.15 1787028559 | earliest → < 1787028559 | 1787028559 |
| Red Hat OpenShift Container Platform 4.16 1787054159 | earliest → < 1787054159 | 1787054159 |
| Red Hat OpenShift Container Platform 4.18 1786540776 | earliest → < 1786540776 | 1786540776 |
| Red Hat OpenShift Container Platform 4.19 1786486822 | earliest → < 1786486822 | 1786486822 |
| Red Hat OpenShift Container Platform 4.20 1786534931 | earliest → < 1786534931 | 1786534931 |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift Container Platform 4.21 1786574043 | earliest → < 1786574043 | 1786574043 |
| Red Hat OpenShift Container Platform 4.22 1786607915 | earliest → < 1786607915 | 1786607915 |
| Red Hat OpenShift Container Platform 4.17 1787631382 | earliest → < 1787631382 | 1787631382 |
| Red Hat OpenShift Container Platform 4.2 1786534931 | earliest → < 1786534931 | 1786534931 |
References
- RHSA-2026:54188 access.redhat.com
- RHSA-2026:54206 access.redhat.com
- RHSA-2026:54545 access.redhat.com
- RHSA-2026:54555 access.redhat.com
- RHSA-2026:54583 access.redhat.com
- RHSA-2026:54602 access.redhat.com
- RHSA-2026:54770 access.redhat.com
- RHSA-2026:56789 access.redhat.com
- RHSA-2026:56854 access.redhat.com
- RHSA-2026:56912 access.redhat.com
- RHSA-2026:60023 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2484746 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenShift Container Platform 4
The 629 CVEs of Red Hat OpenShift Container Platform 4 →
CVE-2026-82976
Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret
7.1
High
CVE-2026-120831
Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
6.5
Medium
CVE-2026-120830
Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
7.4
High
CVE-2026-120194
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
7.5
High