A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json` endpoint. This allows the attacker to read sensitive `*.json` files from the pod filesystem, including plugin manifests and configuration files.
Furthermore, this flaw can enable path traversal against registered dynamic-plugin backends.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
References 9
https://access.redhat.com/security/cve/CVE-2026-75887
secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2517889
secalert@redhat.com
https://access.redhat.com/errata/RHSA-2026:71450
secalert@redhat.com
https://access.redhat.com/errata/RHSA-2026:71453
secalert@redhat.com
https://access.redhat.com/errata/RHSA-2026:71454
secalert@redhat.com
https://access.redhat.com/errata/RHSA-2026:71447
secalert@redhat.com
https://access.redhat.com/errata/RHSA-2026:70587
secalert@redhat.com
https://access.redhat.com/errata/RHSA-2026:70617
secalert@redhat.com
https://access.redhat.com/errata/RHSA-2026:70647
secalert@redhat.com