Red Hat Assisted Installer For Red Hat Openshift Container Platform 2
3 CVEs affecting Red Hat Assisted Installer For Red Hat Openshift Container Platform 2. Latest disclosed: 2026-11-09. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-19706 | High | 8.3 | 2026-11-09 | During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation. An attacker on the install network ca… |
CVE-2026-101295 | High | 7.3 | 2026-09-30 | Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1)… |
CVE-2026-96577 | High | 7.1 | 2026-10-01 | A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encrypt… |