What’s Vulnerable › Vulnerabilities
CVE-2026-75885: Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
- Severity: critical (CVSS 9.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-18 · updated 2026-10-23
- Weakness: CWE-918
Description
A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod makes requests to internal services and reflects partial responses to the attacker. Additionally, by sending repeated large requests without a specified content length, an attacker can cause unbounded memory growth, leading to a Denial of Service (DoS).
Affected products
- Red Hat OpenShift Container Platform 4.18: all versions — fixed in 1789904865
- Red Hat OpenShift Container Platform 4.12: all versions — fixed in 1790102793
- Red Hat OpenShift Container Platform 4.13: all versions — fixed in 1791299243
- Red Hat OpenShift Container Platform 4.14: all versions — fixed in 1790606051
- Red Hat OpenShift Container Platform 4.15: all versions — fixed in 1791836468
- Red Hat OpenShift Container Platform 4.16: all versions — fixed in 1790636171
- Red Hat OpenShift Container Platform 4.17: all versions — fixed in 1789939565
- Red Hat OpenShift Container Platform 4.19: all versions — fixed in 1790095950
- Red Hat OpenShift Container Platform 4.20: all versions — fixed in 1790112153
- Red Hat OpenShift Container Platform 4.21: all versions — fixed in 1790142788
- Red Hat OpenShift Container Platform 4.22: all versions — fixed in 1790130905
How to fix
Upgrade to a fixed version: Red Hat OpenShift Container Platform 4.18 1789904865; Red Hat OpenShift Container Platform 4.12 1790102793; Red Hat OpenShift Container Platform 4.13 1791299243; Red Hat OpenShift Container Platform 4.14 1790606051; Red Hat OpenShift Container Platform 4.15 1791836468; Red Hat OpenShift Container Platform 4.16 1790636171; Red Hat OpenShift Container Platform 4.17 1789939565; Red Hat OpenShift Container Platform 4.19 1790095950; Red Hat OpenShift Container Platform 4.20 1790112153; Red Hat OpenShift Container Platform 4.21 1790142788; Red Hat OpenShift Container Platform 4.22 1790130905. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2026:70587
- https://access.redhat.com/errata/RHSA-2026:70617
- https://access.redhat.com/errata/RHSA-2026:70647
- https://access.redhat.com/errata/RHSA-2026:71447
- https://access.redhat.com/errata/RHSA-2026:71450
- https://access.redhat.com/errata/RHSA-2026:71453
- https://access.redhat.com/errata/RHSA-2026:71454
- https://access.redhat.com/errata/RHSA-2026:73853
- https://access.redhat.com/errata/RHSA-2026:73869
- https://access.redhat.com/errata/RHSA-2026:77321
- https://access.redhat.com/errata/RHSA-2026:82813
- https://access.redhat.com/security/cve/CVE-2026-75885
Get alerted when CVE-2026-75885 or the next vulnerability affects your stack