7.1
Élevée
CVE-2026-87114 A flaw was found in kube-compare
Description
A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator's workstation. If the Docker daemon requires elevated privileges, the untrusted code may execute with root-mediated daemon privileges, posing a significant security risk.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pen Drive Powered by Red Hat Lightspeed | Versions non publiées | |
| Red Hat OpenShift Container Platform 4 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.21 1790707362 | premières → < 1790707362 | 1790707362 |
| Red Hat OpenShift Container Platform 4.22 1790718431 | premières → < 1790718431 | 1790718431 |
| Red Hat OpenShift Container Platform 4.20 1790707563 | premières → < 1790707563 | 1790707563 |
| Red Hat OpenShift Container Platform 4.19 1790632105 | premières → < 1790632105 | 1790632105 |
Références
- RHSA-2026:74381 access.redhat.com
- RHSA-2026:74384 access.redhat.com
- RHSA-2026:74430 access.redhat.com
- RHSA-2026:74435 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2522945 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Pen Drive Powered by Red Hat Lightspeed
Les 8 CVE de Pen Drive Powered by Red Hat Lightspeed →
CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
7.1
Élevée
CVE-2026-19391
Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives
6.5
Moyenne
CVE-2026-15584
A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift
7.5
Élevée
CVE-2026-13083
A flaw was found in the Pen Drive report generator
6.9
Moyenne