Server-Side Request Forgery Vulnerability in OpenShift Console by Red Hat
CVE-2026-75888

7.7HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Openshift Container Platform 4
Vendor
CVE Published:
12 October 2026

What is CVE-2026-75888?

A vulnerability within the OpenShift Console allows authenticated users to exploit a Server-Side Request Forgery (SSRF) flaw. This occurs when users provide a crafted Helm chart URL without adequate validation. The exploitation enables arbitrary URL fetching by the console pod, which can result in the exposure of sensitive information through misleading error messages or facilitate blind port scanning within the cluster, increasing security risks.

References

https://access.redhat.com/security/cve/CVE-2026-75888
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2517888
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.