Red Hat Red Hat Openshift Container Platform 5
8 CVEs affecting Red Hat Red Hat Openshift Container Platform 5. Latest disclosed: 2026-10-29. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-104795 | High | 8.8 | 2026-10-14 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a cont… |
CVE-2026-92982 | High | 8.5 | 2026-10-15 | A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious cust… |
CVE-2026-15801 | High | 8.0 | 2026-09-21 | A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint arch… |
CVE-2026-75888 | High | 7.7 | 2026-10-12 | A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a speciall… |
CVE-2026-93017 | High | 7.7 | 2026-10-08 | The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceName… |
CVE-2026-92092 | High | 7.4 | 2026-10-29 | A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes remote inventory and dynamic scripts without integrity ver… |
CVE-2026-93006 | Medium | 6.8 | 2026-10-29 | A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finish… |
CVE-2026-85498 | Low | 3.5 | 2026-10-29 | A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underf… |