Arbitrary Code Execution Vulnerability in Kube-Compare by Red Hat
CVE-2026-87114

7.1HIGH

Key Information:

Vendor

Red Hat
Status
Pen Drive Powered By Red Hat Lightspeed
Red Hat Openshift Container Platform 4
Vendor
CVE Published:
28 September 2026

What is CVE-2026-87114?

A vulnerability in Kube-Compare allows attackers to exploit untrusted container images by executing their entrypoints instead of just extracting data from stopped containers. This could lead to arbitrary code execution on an operator's workstation, especially if the Docker daemon runs with elevated privileges, potentially granting the untrusted code root access. This poses significant security threats to users and their environments.

References

https://access.redhat.com/security/cve/CVE-2026-87114
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2522945
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.