Server-Side Request Forgery and Supply Chain Flaw in OpenShift Console by Red Hat
CVE-2026-50237

7.4HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Openshift Container Platform 4.12
Red Hat Openshift Container Platform 4.13
Red Hat Openshift Container Platform 4.14
Red Hat Openshift Container Platform 4.15
Vendor
CVE Published:
11 August 2026

What is CVE-2026-50237?

A significant exploit exists in the OpenShift Console's Helm catalog proxy, where a namespace tenant can introduce a ProjectHelmChartRepository linked to an arbitrary URL. This action allows unauthorized data access by the console pod, circumventing any egress restrictions designated for the tenant. The issue can be compounded through catalog metadata poisoning, potentially leading to escalated privileges during admin-mediated chart installations.

Affected Version(s)

Red Hat OpenShift Container Platform 4.12 1786511587

Red Hat OpenShift Container Platform 4.13 1786477760

Red Hat OpenShift Container Platform 4.14 1787056403

References

https://access.redhat.com/errata/RHSA-2026:54188
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54206
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54545
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Christopher Lusk (North Echo Security Research) for reporting this issue.
.