What’s Vulnerable › Vulnerabilities
CVE-2026-50237: Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console
- Severity: high (CVSS 7.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-11 · updated 2026-10-24
- Weakness: CWE-918
Description
A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata poisoning and admin-mediated chart installation, this enables privilege escalation.
Affected products
- Red Hat OpenShift Container Platform 4.18: all versions — fixed in 1786540776
- Red Hat OpenShift Container Platform 4.12: all versions — fixed in 1786511587
- Red Hat OpenShift Container Platform 4.13: all versions — fixed in 1786477760
- Red Hat OpenShift Container Platform 4.14: all versions — fixed in 1787056403
- Red Hat OpenShift Container Platform 4.15: all versions — fixed in 1787028559
- Red Hat OpenShift Container Platform 4.16: all versions — fixed in 1787054159
- Red Hat OpenShift Container Platform 4.17: all versions — fixed in 1787631382
- Red Hat OpenShift Container Platform 4.19: all versions — fixed in 1786486822
- Red Hat OpenShift Container Platform 4.20: all versions — fixed in 1786534931
- Red Hat OpenShift Container Platform 4.21: all versions — fixed in 1786574043
- Red Hat OpenShift Container Platform 4.22: all versions — fixed in 1786607915
How to fix
Upgrade to a fixed version: Red Hat OpenShift Container Platform 4.18 1786540776; Red Hat OpenShift Container Platform 4.12 1786511587; Red Hat OpenShift Container Platform 4.13 1786477760; Red Hat OpenShift Container Platform 4.14 1787056403; Red Hat OpenShift Container Platform 4.15 1787028559; Red Hat OpenShift Container Platform 4.16 1787054159; Red Hat OpenShift Container Platform 4.17 1787631382; Red Hat OpenShift Container Platform 4.19 1786486822; Red Hat OpenShift Container Platform 4.20 1786534931; Red Hat OpenShift Container Platform 4.21 1786574043; Red Hat OpenShift Container Platform 4.22 1786607915. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2026:54188
- https://access.redhat.com/errata/RHSA-2026:54206
- https://access.redhat.com/errata/RHSA-2026:54545
- https://access.redhat.com/errata/RHSA-2026:54555
- https://access.redhat.com/errata/RHSA-2026:54583
- https://access.redhat.com/errata/RHSA-2026:54602
- https://access.redhat.com/errata/RHSA-2026:54770
- https://access.redhat.com/errata/RHSA-2026:56789
- https://access.redhat.com/errata/RHSA-2026:56854
- https://access.redhat.com/errata/RHSA-2026:56912
- https://access.redhat.com/errata/RHSA-2026:60023
- https://access.redhat.com/security/cve/CVE-2026-50237
Get alerted when CVE-2026-50237 or the next vulnerability affects your stack