CVE-2026-75887 Red Hat CVE debrief

Who should care

Defenders responsible for OpenShift console configurations, plugin manifests, and dynamic-plugin backends should assess exposure and apply patches or mitigations to prevent potential sensitive file reads.

Why it matters

Unauthenticated path traversal in OpenShift console allows sensitive file reads and potential path traversal against dynamic-plugin backends, requiring defenders to verify exposure and apply patches or mitigations.

• Potential sensitive file reads from the pod filesystem
• Possible path traversal against registered dynamic-plugin backends
• Verification of exposure and patch application priority
• Monitoring for suspicious activity related to dynamic-plugin backends

Technical summary

The OpenShift console is vulnerable to an unauthenticated path traversal attack, allowing an attacker to read sensitive *.json files from the pod filesystem by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json` endpoint. This vulnerability can be exploited to access sensitive information, including plugin manifests and configuration files. The attack can also enable path traversal against registered dynamic-plugin backends, potentially leading to further exploitation. Defenders should prioritize verifying exposure and applying patches or mitigations to prevent potential sensitive file reads and path traversal attacks. The vulnerability is a result of insufficient input validation,

Defensive priority

Defenders should prioritize verifying exposure and applying patches or mitigations to prevent potential sensitive file reads.

Recommended defensive actions

• Verify exposure by checking OpenShift console configurations and plugin manifests
• Apply patches or mitigations provided by Red Hat
• Monitor for suspicious activity related to dynamic-plugin backends
• Review and update incident response plans to address potential sensitive file reads
• Perform a thorough review of the OpenShift console and dynamic-plugin backends for any signs of compromise
• Implement additional security measures, such as Web Application Firewalls (WAFs), to detect and prevent similar attacks
• Conduct regular security audits and vulnerability assessments to identify and address potential weaknesses

Evidence notes

The CVE record and source item provide details on the vulnerability, but do not specify which versions are affected or provide remediation steps. Red Hat has released several advisories related to this vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.