VDB
RHSA-2026:54206
RHSA-2026:54206
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-tests@sha256:ab548f5081ae1af64bec5bbbc6a0575cb2d6722ef7536137be51034ea2f16348_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-node-driver-registrar-rhel8@sha256:26f8d96083da21d9f3ebf06597758982ba6ae858df9f377a68708a326192c87a_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:0eb48b0c444b32feb7a90fb56fe29466476c6776d6c2b05c3acc3df1abf29cbf_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:c9e2954f7a8703f3ff061765c098aa6bd81454542e81b3f4d861aa5774f2d0a5_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:345d007dc52f1693dac62505a97002d96075675877e34a3483a29800df01e82d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel8@sha256:610ac83d13c3ff882756429528e306d111a0bbf30938b0094f0be3aa30f91e30_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:6cb08bb49bf4be83388a3af3aee25dbae88177b6cf7b441ca4f02c8fbdd70678_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-configmap-reloader@sha256:1d613ed9540ab2f487ba1a40440bfea4b2fb762ed255e7c27d28691d7938f266_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8@sha256:c4ad3ac1515935eaa59c0b7b482bb1bc1172e0b8f026125586a56aa3e6fe22d3_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:77dd0d1843061621b2b4c350e93d256bd46d0e3553c81b3f29af8a1eedd3b020_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:822cb269510101b215c4eb2e5a14d05f8751bae72f5d21d84480f10e73093586_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:78e0d3678af258828908675270dce623096b81d6a27ed0c299c7dec255e24848_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-operator@sha256:c3660f5bb2821e417ae12f9ffaf5714254a94c23775eaa276abfb0e5b5a78a94_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-azure-rhel8@sha256:cbb30cf098cf97a09b94ef7f40eb07f8618f35d6ceb045b4c81bf6e4969f8aa3_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-route-override-cni-rhel8@sha256:4fe82dff4126096531b4389d95bdbeaca69feeb9b032b186848a4464cb24b3bf_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:aaa4f3e70f9ba6c41ebe1eb5293c359f460667feb42ccc14a16967fc19ac9a5e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:618dc6282ffe6f8010c2a4a3bbbdd9f00c42f82e1d8f1ca35a8e06cfb7ec2040_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:e6298cde9fda04b4c2275aba0de86d5ef37d748e2ecd894ff0a0ca5e52df2617_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:73a92452399c2efcf31b69a34e43e1ce9b67bd813301a138202356fbecd0d011_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:2a4d7bd2eb6767858e2707e2f4419817986a2b1379b4ef600aec0cfc882575c0_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
…and 170 more
Timeline
- Aug 20, 2026 CVE Published
- Aug 24, 2026 CVE Updated
- Aug 24, 2026 Distribution Patch
- Aug 24, 2026 Distribution Patch
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:54206 advisory
- https://access.redhat.com/security/cve/CVE-2026-44486 advisory
- https://access.redhat.com/security/cve/CVE-2026-44487 advisory
- https://access.redhat.com/security/cve/CVE-2026-49332 advisory
- https://access.redhat.com/security/cve/CVE-2026-50237 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54206.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2487947 issue
- https://www.cve.org/CVERecord?id=CVE-2026-44486 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-44486 advisory
- https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2487948 issue
- https://www.cve.org/CVERecord?id=CVE-2026-44487 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-44487 advisory
- https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2483253 issue
- https://www.cve.org/CVERecord?id=CVE-2026-49332 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-49332 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484746 issue
- https://www.cve.org/CVERecord?id=CVE-2026-50237 advisory
…and 1 more