Skip to content
fr Sign in
7.2 High

CVE-2026-75886 A flaw was found in openshift/console

Description

A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and the forwarding of the `openshift-session-token` cookie. This allows the attacker to send requests to the in-cluster catalogd service, leading to the disclosure of the internal operator-catalog index and providing a relay into the openshift-catalogd namespace.

Affected products and versions

Product Affected versions Fixed in
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat OpenShift Container Platform 4.20 1790112153 earliest → < 1790112153 1790112153
Red Hat OpenShift Container Platform 4.21 1790142788 earliest → < 1790142788 1790142788
Red Hat OpenShift Container Platform 4.22 1790130905 earliest → < 1790130905 1790130905
Red Hat OpenShift Container Platform 4.19 1790095950 earliest → < 1790095950 1790095950
Red Hat OpenShift Container Platform 4.17 1789939565 earliest → < 1789939565 1789939565
Red Hat OpenShift Container Platform 4.18 1789904865 earliest → < 1789904865 1789904865

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat OpenShift Container Platform 4

The 629 CVEs of Red Hat OpenShift Container Platform 4 →
CVE-2026-82976 Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret 7.1 High CVE-2026-120831 Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service 6.5 Medium CVE-2026-120830 Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure 7.4 High CVE-2026-120194 Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step 7.5 High
Track this CVE