7.5Hoch
CVE-2026-75887Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
Beschreibung
A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json` endpoint. This allows the attacker to read sensitive `*.json` files from the pod filesystem, including plugin manifests and configuration files. Furthermore, this flaw can enable path traversal against registered dynamic-plugin backends.
Schwachstellentyp (CWE):
CWE-22
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| openshift | 4.12 | — | |
| openshift | 4.13 | — | |
| openshift | 4.14 | — | |
| openshift | 4.15 | — | |
| openshift | 4.16 | — | |
| openshift | 4.17 | — | |
| openshift | 4.18 | — | |
| openshift | 4.19 | — | |
| openshift | 4.20 | — | |
| openshift | 4.21 | — | |
| openshift | 4.22 | — | |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | all versions |
Referenzen und Patches
- RHSA-2026:70587 vendor-advisory
- RHSA-2026:70617 vendor-advisory
- RHSA-2026:70647 vendor-advisory
- RHSA-2026:71447 vendor-advisory
- RHSA-2026:71450 vendor-advisory
- RHSA-2026:71453 vendor-advisory
- RHSA-2026:71454 vendor-advisory
- RHSA-2026:73853 vendor-advisory
- RHSA-2026:73869 vendor-advisory
- RHSA-2026:77321 vendor-advisory
- RHSA-2026:82813 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-75887 vdb-entry
- RHBZ#2517889 issue-tracking