All vulnerabilities
CVE-2026-75888

Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch

Red Hat Red Hat OpenShift Container Platform 4.14Operating systems
Open in ThreatlineRecord JSON
CVSS
7.7High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 18% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published12 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading to the disclosure of sensitive information through error messages or enabling blind port scanning within the cluster.

Text from CVE List

Affected versions 6

  • Red Hat OpenShift Container Platform 4.14unaffected: 1791842061 and laterCVE List
  • Red Hat OpenShift Container Platform 4.15unaffected: 1791836468 and laterCVE List
  • Red Hat OpenShift Container Platform 4.19unaffected: 1791626503 and laterCVE List
  • Red Hat OpenShift Container Platform 4.20unaffected: 1791962432 and laterCVE List
  • Red Hat OpenShift Container Platform 4.21unaffected: 1792057253 and laterCVE List
  • Red Hat OpenShift Container Platform 4.22unaffected: 1791977124 and laterCVE List

References 8