VDB
RHSA-2026:70647
RHSA-2026:70647
PUBLISHED
CVSS 7.5 HIGH
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:b82975e8550e198d0d30abb27e831e241e408a781c4e9f3737239e38a59f2dcc_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:04d3a2ab9bcba4bfd8c9c304314cb0b31dc090ba99951fc7dd4c40f15033ad00_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-autoscaler@sha256:b7092236d3a4ec1948f2f42db5cbab3a3f45740c31875a78e89aa2e3c9e16d2d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-registry@sha256:5dea266806b94794b71b2a4cfb2e2cbad09ef6f4f0940f168c518b9bcd1d6d97_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-capi-rhel8-operator@sha256:b23590048651489042644ea35f08a1ba2daba5eb396365bd05887c2531cdd1ab_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-version-operator@sha256:52e7331b910cc6a3036931c1f3eaf6a02c589656713354c64b1bd7f0c8e23101_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:571d68cd7102a210b7cce649c055c70c186a5280506b519e2544a5061d5015e7_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-snapshotter@sha256:912e0182c834c9227533a77c04882a897e17decb10b698436b865ab1662b8d84_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:ca3ab118333302a2de958d06f8d2fbf3fc4c2660aa9b7256ce8c4e3cd0f8d1d5_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:09f111e2253acc3f1d24f67808a0c1fbc96683c553ba3afadd1c0ddae9d5ca75_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel8@sha256:6393b116c8215160f57d64f66845095bbe119f8db3442002db83ff31f96a31cd_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8@sha256:5ab1885d1282e7ff634e31dcbfd494cea2c5a27e50cdf085ffc07d81aa940fba_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-admission-controller@sha256:37f7eaaf1d8fce02e488558e48b74178b6475174bbfbed56ac528563a205e9ce_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-kuryr-cni-rhel8@sha256:98bd5e4b7bd1a79eed6b546231b608115577c070aa92b3588583a6510e5d05a2_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-installer@sha256:7493aaa05f8f98163474a20701c6b648732405200db71fb4a3eabf413f8ec714_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-node-driver-registrar@sha256:b8b020e23b2a09e49d11fab5c6f9672870e528502833520fcf9b02e555e80577_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:d695bd8293387d81caa930399c7c462d975b3c3efa1f7da03001cac149abe700_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni@sha256:f068a8f4a4e332b52e7b911af4edc5fe6312d72e602497ddf0ae634ec4f58e7b_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:6ce0b630ba7f1d2228bb71b1238fa46c9b4526d26f8a84ce5510dab4f8ec8e4a_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-config-operator@sha256:87f87be79d41aa4c712f7a191b5034d0e3cedbaa58d5917625ad7f353e2057b3_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
…and 171 more
Timeline
- Oct 1, 2026 CVE Published
- Oct 4, 2026 CVE Updated
- Oct 4, 2026 Distribution Patch
- Oct 4, 2026 Distribution Patch
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:70647 advisory
- https://access.redhat.com/security/cve/CVE-2026-1784 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/cve/CVE-2026-75885 advisory
- https://access.redhat.com/security/cve/CVE-2026-75887 advisory
- https://access.redhat.com/security/cve/CVE-2026-9277 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70647.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2436075 issue
- https://www.cve.org/CVERecord?id=CVE-2026-1784 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-1784 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2480741 issue
- https://www.cve.org/CVERecord?id=CVE-2026-9277 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-9277 advisory
- https://github.com/ljharb/shell-quote advisory
- https://github.com/ljharb/shell-quote/commit/1518179 advisory
…and 41 more