What’s Vulnerable › Vulnerabilities
CVE-2026-75887: Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-23 · updated 2026-10-23
- Weakness: CWE-22
Description
A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json` endpoint. This allows the attacker to read sensitive `*.json` files from the pod filesystem, including plugin manifests and configuration files. Furthermore, this flaw can enable path traversal against registered dynamic-plugin backends.
Affected products
- Red Hat OpenShift Container Platform 4.18: all versions — fixed in 1789904865
- Red Hat OpenShift Container Platform 4.12: all versions — fixed in 1790102793
- Red Hat OpenShift Container Platform 4.13: all versions — fixed in 1791299243
- Red Hat OpenShift Container Platform 4.14: all versions — fixed in 1790606051
- Red Hat OpenShift Container Platform 4.15: all versions — fixed in 1791836468
- Red Hat OpenShift Container Platform 4.16: all versions — fixed in 1790636171
- Red Hat OpenShift Container Platform 4.17: all versions — fixed in 1789939565
- Red Hat OpenShift Container Platform 4.19: all versions — fixed in 1790095950
- Red Hat OpenShift Container Platform 4.20: all versions — fixed in 1790112153
- Red Hat OpenShift Container Platform 4.21: all versions — fixed in 1790142788
- Red Hat OpenShift Container Platform 4.22: all versions — fixed in 1790130905
How to fix
Upgrade to a fixed version: Red Hat OpenShift Container Platform 4.18 1789904865; Red Hat OpenShift Container Platform 4.12 1790102793; Red Hat OpenShift Container Platform 4.13 1791299243; Red Hat OpenShift Container Platform 4.14 1790606051; Red Hat OpenShift Container Platform 4.15 1791836468; Red Hat OpenShift Container Platform 4.16 1790636171; Red Hat OpenShift Container Platform 4.17 1789939565; Red Hat OpenShift Container Platform 4.19 1790095950; Red Hat OpenShift Container Platform 4.20 1790112153; Red Hat OpenShift Container Platform 4.21 1790142788; Red Hat OpenShift Container Platform 4.22 1790130905. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2026:70587
- https://access.redhat.com/errata/RHSA-2026:70617
- https://access.redhat.com/errata/RHSA-2026:70647
- https://access.redhat.com/errata/RHSA-2026:71447
- https://access.redhat.com/errata/RHSA-2026:71450
- https://access.redhat.com/errata/RHSA-2026:71453
- https://access.redhat.com/errata/RHSA-2026:71454
- https://access.redhat.com/errata/RHSA-2026:73853
- https://access.redhat.com/errata/RHSA-2026:73869
- https://access.redhat.com/errata/RHSA-2026:77321
- https://access.redhat.com/errata/RHSA-2026:82813
- https://access.redhat.com/security/cve/CVE-2026-75887
Get alerted when CVE-2026-75887 or the next vulnerability affects your stack