VDB
RHSA-2026%3A6503
RHSA-2026%3A6503
PUBLISHED
CVSS 6.599999904632568 MEDIUM
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.
Risk Scores
CVSS 3.1
6.599999904632568
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/odf4/odf-rhel9-operator@sha256:3588fbc952ccdfa81b2e81ce55294f651d40ef331037fa7194350f533e502827_arm64 as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-rhel9-operator@sha256:3588fbc952ccdfa81b2e81ce55294f651d40ef331037fa7194350f533e502827_arm64, registry.redhat.io/odf4/odf-rhel9-operator@sha256:3588fbc952ccdfa81b2e81ce55294f651d40ef331037fa7194350f533e502827_arm64 |
| Red Hat | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:5dd091a4999c42a4ff9cd13accdc1851518cea185657e295ac8b1900d558a29f_amd64 as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:5dd091a4999c42a4ff9cd13accdc1851518cea185657e295ac8b1900d558a29f_amd64, registry.redhat.io/odf4/ocs-rhel9-operator@sha256:5dd091a4999c42a4ff9cd13accdc1851518cea185657e295ac8b1900d558a29f_amd64, registry.redhat.io/odf4/ocs-rhel9-operator@sha256:5dd091a4999c42a4ff9cd13accdc1851518cea185657e295ac8b1900d558a29f_amd64 |
| Red Hat | registry.redhat.io/odf4/odr-rhel9-operator@sha256:de194d2dcd495f26094ddfe3683c1af12f831abc7867fe05c134363093a6fffc_ppc64le as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odr-rhel9-operator@sha256:de194d2dcd495f26094ddfe3683c1af12f831abc7867fe05c134363093a6fffc_ppc64le, registry.redhat.io/odf4/odr-rhel9-operator@sha256:de194d2dcd495f26094ddfe3683c1af12f831abc7867fe05c134363093a6fffc_ppc64le |
| Red Hat | registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9ddf1ba86ddb5b3aa16ad468969ff18e556abbceb5153001340322b84dad58a7_arm64 as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9ddf1ba86ddb5b3aa16ad468969ff18e556abbceb5153001340322b84dad58a7_arm64, * |
| Red Hat | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:73d3eb352ccd0ab4dbfb85502031b036f156105eebc8f92296e8e256b89b8529_s390x as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:73d3eb352ccd0ab4dbfb85502031b036f156105eebc8f92296e8e256b89b8529_s390x, registry.redhat.io/odf4/ocs-rhel9-operator@sha256:73d3eb352ccd0ab4dbfb85502031b036f156105eebc8f92296e8e256b89b8529_s390x, * |
| Red Hat | registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:73e5d007d3e0c57d96d3c11027a36d57eafab5b71877f0f09615934dbaf81445_arm64 as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:73e5d007d3e0c57d96d3c11027a36d57eafab5b71877f0f09615934dbaf81445_arm64, registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:73e5d007d3e0c57d96d3c11027a36d57eafab5b71877f0f09615934dbaf81445_arm64, registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:73e5d007d3e0c57d96d3c11027a36d57eafab5b71877f0f09615934dbaf81445_arm64 |
| Red Hat | registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a484a562b8693a76fec6612e360a077863c9d6c95c16816f18c0d3529fda4f65_ppc64le as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a484a562b8693a76fec6612e360a077863c9d6c95c16816f18c0d3529fda4f65_ppc64le, registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a484a562b8693a76fec6612e360a077863c9d6c95c16816f18c0d3529fda4f65_ppc64le, * |
| Red Hat | registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:58cdf902630b571c30e2bc30e2f758301dc35bd2bdcd0c9205ecb40cde84202f_amd64 as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:58cdf902630b571c30e2bc30e2f758301dc35bd2bdcd0c9205ecb40cde84202f_amd64, *, registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:58cdf902630b571c30e2bc30e2f758301dc35bd2bdcd0c9205ecb40cde84202f_amd64 |
| Red Hat | registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:a3ed5f96f3201ae55bb3f4dea6c116c0788d8c1ca49d4d24aa171ad32a07b188_arm64 as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:a3ed5f96f3201ae55bb3f4dea6c116c0788d8c1ca49d4d24aa171ad32a07b188_arm64, registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:a3ed5f96f3201ae55bb3f4dea6c116c0788d8c1ca49d4d24aa171ad32a07b188_arm64 |
| Red Hat | registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6503afcba4a7f139e8ba17f59edbe0c109c56ecd62e6e249505f3e0a4020b182_arm64 as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6503afcba4a7f139e8ba17f59edbe0c109c56ecd62e6e249505f3e0a4020b182_arm64, registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6503afcba4a7f139e8ba17f59edbe0c109c56ecd62e6e249505f3e0a4020b182_arm64 |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:be9b93fc778edec0a514e9acf2abcfb4fc78c3a241676acdebcf513db7a416c0_s390x as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:be9b93fc778edec0a514e9acf2abcfb4fc78c3a241676acdebcf513db7a416c0_s390x, registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:be9b93fc778edec0a514e9acf2abcfb4fc78c3a241676acdebcf513db7a416c0_s390x, * |
| Red Hat | registry.redhat.io/odf4/odf-operator-bundle@sha256:1694c2baed4b1fcb14d096a9de4e1d986d11e6246defef85a16cba9c859d9044_amd64 as a component of Red Hat Openshift Data Foundation 4.2 | *, registry.redhat.io/odf4/odf-operator-bundle@sha256:1694c2baed4b1fcb14d096a9de4e1d986d11e6246defef85a16cba9c859d9044_amd64 |
| Red Hat | registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c46d5db93877a5ad790ced226a1b2f5682fe51d743938fa6561cb499397eaa84_ppc64le as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c46d5db93877a5ad790ced226a1b2f5682fe51d743938fa6561cb499397eaa84_ppc64le, registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c46d5db93877a5ad790ced226a1b2f5682fe51d743938fa6561cb499397eaa84_ppc64le |
| Red Hat | registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:2aa9161a19f70a119b7096f8ddf12c09dbd941a087481059d1cae021faba70cc_amd64 as a component of Red Hat Openshift Data Foundation 4.2 | *, registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:2aa9161a19f70a119b7096f8ddf12c09dbd941a087481059d1cae021faba70cc_amd64, registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:2aa9161a19f70a119b7096f8ddf12c09dbd941a087481059d1cae021faba70cc_amd64 |
| Red Hat | registry.redhat.io/odf4/odf-rhel9-operator@sha256:4d78b0a70e002c0319b54ec53bf7bf7dc6ff21d8e358a12ef1aaf209b9bdaaca_s390x as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-rhel9-operator@sha256:4d78b0a70e002c0319b54ec53bf7bf7dc6ff21d8e358a12ef1aaf209b9bdaaca_s390x, registry.redhat.io/odf4/odf-rhel9-operator@sha256:4d78b0a70e002c0319b54ec53bf7bf7dc6ff21d8e358a12ef1aaf209b9bdaaca_s390x |
| Red Hat | registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0b5f12a165ad061ec151f9310fa5803717cb41f719802503125d982f5420edd0_arm64 as a component of Red Hat Openshift Data Foundation 4.2 | *, registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0b5f12a165ad061ec151f9310fa5803717cb41f719802503125d982f5420edd0_arm64, * |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:5f08b4c7869c60f005692c5e74e1ca6d55bdebf90c0b28ab25f31fd9422a139f_s390x as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:5f08b4c7869c60f005692c5e74e1ca6d55bdebf90c0b28ab25f31fd9422a139f_s390x, registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:5f08b4c7869c60f005692c5e74e1ca6d55bdebf90c0b28ab25f31fd9422a139f_s390x |
| Red Hat | registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:6ae1eb0c3fbc067ae11d1d93e512111ed0866d580fa3f461706a5eee4c8bfc56_s390x as a component of Red Hat Openshift Data Foundation 4.2 | registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:6ae1eb0c3fbc067ae11d1d93e512111ed0866d580fa3f461706a5eee4c8bfc56_s390x, registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:6ae1eb0c3fbc067ae11d1d93e512111ed0866d580fa3f461706a5eee4c8bfc56_s390x |
| Red Hat | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:df3abf53e0e539d5f9e82bfb607f0572222c41dfc1bd6bc3719cdec29c377c7a_s390x as a component of Red Hat Openshift Data Foundation 4.2 | *, registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:df3abf53e0e539d5f9e82bfb607f0572222c41dfc1bd6bc3719cdec29c377c7a_s390x, * |
| Red Hat | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:31bd7bff52021201beffb8f94e25635443390ed7c373fef546dd799c29a540dd_amd64 as a component of Red Hat Openshift Data Foundation 4.2 | *, registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:31bd7bff52021201beffb8f94e25635443390ed7c373fef546dd799c29a540dd_amd64, * |
…and 184 more
Timeline
- Apr 2, 2026 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 14, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:6503 advisory
- https://access.redhat.com/security/cve/CVE-2024-5042 advisory
- https://access.redhat.com/security/cve/CVE-2025-22870 advisory
- https://access.redhat.com/security/cve/CVE-2025-47913 advisory
- https://access.redhat.com/security/cve/CVE-2025-47914 advisory
- https://access.redhat.com/security/cve/CVE-2025-58181 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6503.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2280921 issue
- https://www.cve.org/CVERecord?id=CVE-2024-5042 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-5042 advisory
- https://github.com/advisories/GHSA-2rhx-qhxp-5jpw advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2351766 issue
- https://www.cve.org/CVERecord?id=CVE-2025-22870 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22870 advisory
- https://go.dev/cl/654697 advisory
- https://go.dev/issue/71984 advisory
- https://pkg.go.dev/vuln/GO-2025-3503 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2414943 issue
…and 19 more