A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading to the disclosure of sensitive information through error messages or enabling blind port scanning within the cluster.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products
red hat:red hat openshift container platform 4
red hat:red hat openshift container platform 4.21
red hat:red hat openshift container platform 4.20
red hat:red hat openshift container platform 4.22
References 5
https://access.redhat.com/security/cve/CVE-2026-75888
secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2517888
secalert@redhat.com
https://access.redhat.com/errata/RHSA-2026:83502
RHSA-2026:83502
https://access.redhat.com/errata/RHSA-2026:83541
RHSA-2026:83541
https://access.redhat.com/errata/RHSA-2026:83702
RHSA-2026:83702