Vulnerability in OpenShift Client Enables Unauthorized File Access
CVE-2026-115424

5.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Openshift Container Platform 4
Vendor
CVE Published:
22 October 2026

What is CVE-2026-115424?

A security flaw exists in the OpenShift client (oc) during the process of extracting container image layers. This vulnerability arises from the application’s inability to properly sanitize symbolic and hard link targets that point to absolute paths or sibling directories relative to the extraction destination. An attacker can exploit this issue by embedding malicious links within a container image and supplying a chained file entry that references locations beyond the intended extraction directory. Consequently, this allows the attacker to write data into arbitrary locations on the host filesystem, executing actions with the same privileges as the user running the command, which poses significant risks of unauthorized file modifications.

References

https://access.redhat.com/security/cve/CVE-2026-115424
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2558338
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Yashashree Gund for reporting this issue.
.