Latest high severity vulnerabilities for "red hat openshift container platform"

For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:f7c8010c24807273c8b9e77064d4a7089c8fcf6585749d864b55b98176ba745f (For s390x architecture) The image digest is sha256:093b7cfbad0f920f6f5668c9edfa120a5fd43ed24c71020464133dab18d4394a (For ppc64le architecture) The image digest is sha256:8121257742990c3b7d3b1dc4661f6029cf694a7f5f85d7497a466a019b029b20 (For aarch64 architecture) The image digest is sha256:d73df62e9d3254daccf3fabc888e4081a67e39048191517292fdf0b60c19c7b5 All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2026:23246

Red Hat OpenShift Container PlatformImportant: OpenShift Container Platform 4.12.91 bug fix and security update

Risk 33

Severity

Important: OpenShift Container Platform 4.12.91 bug fix and security update

First published (updated )

Advisory

RHSA-2026:21695

Red Hat Cloud Credential OperatorCloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws

Risk 66

Severity

7.2

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A flaw was found in the Cloud Credential Operator (CCO) Mint-mode CredentialsRequest manifests shipped with OpenShift Container Platform for AWS. The CredentialsRequest specifications for the Image Registry, Machine API, Ingress Operator, and EBS CSI Driver request IAM policies with Resource: "" for destructive actions (S3 CreateBucket/DeleteBucket/PutObject/DeleteObject, EC2 TerminateInstances/RunInstances, Route53 ChangeResourceRecordSets, EC2 DeleteVolume/DeleteSnapshot). This grants the provisioned operator IAM credentials access to any AWS resource in the account, not just resources owned by the cluster. An attacker who obtains these credentials (via pod compromise, RBAC escalation, or Secret read) can perform destructive operations against unrelated AWS resources in the same account, including deleting S3 buckets, terminating EC2 instances, modifying DNS records in unrelated hosted zones, and deleting EBS volumes belonging to other workloads or clusters.

1 / 2

Source: Red Hat

First published (updated )

CVE-2026-10843

Red Hat OpenShift Container PlatformImportant: OpenShift Container Platform 4.14.65 bug fix and security update

Risk 33

Severity

Buffer Overflow, Integer Overflow, Use After Free, Command Injection, OS Command Injection

Important: OpenShift Container Platform 4.14.65 bug fix and security update

Remedy

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:58619bd3685bebf42b1de421a21dd74d429a73d2842db8530468811dd8c762f6 (For s390x architecture) The image digest is sha256:a42b5d59c2d8006a7531f21bf9494508a2223cfe0305c8323dd8d8805edd5bb6 (For ppc64le architecture) The image digest is sha256:b3348021ca46196e46190a64246264ce6793628e3ed80b4957c0352c42014d01 (For aarch64 architecture) The image digest is sha256:c40d6097277e7aacf96a3e883fb77cbd3d9cd42e698f98daaadf69204abaad4a All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2026:15087

Red Hat OpenShift Container PlatformImportant: OpenShift Container Platform 4.19.28 bug fix and security update

Risk 33

Severity

Buffer Overflow, Use After Free, Command Injection, OS Command Injection

Important: OpenShift Container Platform 4.19.28 bug fix and security update

Remedy

For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:b274766f7194a7dc825e335a54078790519c0dbe3431c029fd08dbba1c431855 (For s390x architecture) The image digest is sha256:066bfcb590ef6f34106e63861d420a3fdcdebd734bb729668c8c6de59b84c632 (For ppc64le architecture) The image digest is sha256:ff14e60b2b4760a6c2578e444b40f457fe2322f5211b1b838078b1fa6ea1b443 (For aarch64 architecture) The image digest is sha256:52b1e8cf83dd1a854194212cc94bfe2719afb2e014f7b1a315250a9c7273a600 All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2026:7243

Red Hat ose-cluster-ingress-operatorOse-cluster-ingress-operator: remote code execution through haproxy configuration injection

Risk 72

Severity

8.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.

1 / 2

Source: NVD

First published (updated )

CVE-2026-1784

Red Hat Red Hat OpenShift Container Platform for ARM 64Important: OpenShift Container Platform 4.18.17 bug fix and security update

Risk 33

Severity

Important: OpenShift Container Platform 4.18.17 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release" target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release</a> tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:9d24a8cdd67b8f18c99547d5910e4863e7aab5bd888e26670a00dbda0a9d4687 (For s390x architecture) The image digest is sha256:d6e30dbd3e240d3fd8a47242d328e12af9e163e4f0b4a65f1822afe580a62ef0 (For ppc64le architecture) The image digest is sha256:38222db37661b7df451174b32eb5bf0277f24f7dccdb6116143a7e7a3a1cc771 (For aarch64 architecture) The image digest is sha256:a9ec080140eb10d89152878911949607becef8750975741c110b36ae7e2b6c7b All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2025:8560

Red Hat Red Hat OpenShift Container Platform for IBM Z and LinuxONEImportant: OpenShift Container Platform 4.12.77 bug fix and security update

Risk 33

Severity

Use After Free

Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.This advisory contains the container images for Red Hat OpenShift Container Platform 4.12.77. See the following advisory for the RPM packages for this release:https://access.redhat.com/errata/RHBA-2025:8304 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:https://docs.redhat.com/en/documentation/openshiftcontainerplatform/4.12/html/releasenotes Security Fix(es): libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549) libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshiftcontainerplatform/4.12/html-single/updatingclusters/index#updating-cluster-within-minor.

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes</a> You may download the oc tool and use it to inspect release image metadata for the x86_64 architecture. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:753e18b761de2e56bdf29b56665c33624f1c27d7cfa0b6b5c081bcc3b035c864 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.</a>

First published (updated )

Advisory

RHSA-2025:8303

Red Hat Red Hat OpenShift Container Platform for ARM 64Important: OpenShift Container Platform 4.15.52 security and extras update

Risk 33

Severity

Important: OpenShift Container Platform 4.15.52 security and extras update

1 / 2

Source: Red Hat

Remedy

First published (updated )

Advisory

RHSA-2025:8301

Red Hat Red Hat OpenShift Container PlatformImportant: OpenShift Container Platform 4.17.32 bug fix and security update

Risk 33

Severity

Important: OpenShift Container Platform 4.17.32 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:0c2421a241e95f56895906885e7f7e53cb1520ee6a82db5cdeea98f5f65457d7 (For s390x architecture) The image digest is sha256:542000db3d3c126ab0c88f24e7e238de66a743026b95b603d311204dcb36132e (For ppc64le architecture) The image digest is sha256:7482c48c0cdefbe9f88e0ddd748a6f00e1d2cc1fbd395a8270425a48d758a0c2 (For aarch64 architecture) The image digest is sha256:930640a1fabd9bd84756bd35e5e5518e3e5576d5a22954698b6456729fb996e8 All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2025:8280

Red Hat Red Hat OpenShift Container Platform for ARM 64Important: OpenShift Container Platform 4.18.16 bug fix and security update

Risk 33

Severity

Important: OpenShift Container Platform 4.18.16 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:0dac222584991f89a123d85e8c3055f0056e5876fc209b8d4bea7a59e7504d59 (For s390x architecture) The image digest is sha256:33f8af4513fc5394c3210f5a3b447f4920cc9bd099830479d05f3799ae80f0a5 (For ppc64le architecture) The image digest is sha256:8e522017e74e046cf57a76545fe6cc2cd742a79ff17bc22d66eee5126e5907c4 (For aarch64 architecture) The image digest is sha256:12d59fd82eb938b06896679cc9a821651a2b05fdf74d0d23e528977f0fb11461 All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2025:8284

Red Hat Red Hat OpenShift Container Platform for ARM 64Important: OpenShift Container Platform 4.14.52 bug fix and security update

Risk 33

Severity

Use After Free

Important: OpenShift Container Platform 4.14.52 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/</a> You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:66bd4e160209b4e7add5514498c4889812b76fa2786d1219d7d2152eea1b4f1c (For s390x architecture) The image digest is sha256:9a56729c25596d90c228f04d5e4b5080a3921a325e0c768da51b81b6a032cf07 (For ppc64le architecture) The image digest is sha256:078d5b2c3ce7ed409c454c01113e6171a8852f434069c1f8565e4a310b8e00b5 (For aarch64 architecture) The image digest is sha256:b1e60833e9535efa25a4e42efe461e6c0c9b7fcea4a499428bdee7577884f0cf All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2025:7702

Red Hat Red Hat OpenShift Container Platform for ARM 64Important: OpenShift Container Platform 4.15.51 bug fix and security update

Risk 33

Severity

Important: OpenShift Container Platform 4.15.51 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/</a> You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:9fdf7a2305973c26b4075ce1a16b295dbe25092b8ed0ae21506d93cafb6dd9a9 (For s390x architecture) The image digest is sha256:061e78269860d8237515ab8ba70411655158844fbe3f824927b86bba67e04766 (For ppc64le architecture) The image digest is sha256:d681578824d4c415402798788bcd0f1bde249ea0608d520cdae79513a333150c (For aarch64 architecture) The image digest is sha256:ec919619c51dad303a00f7d4c5607e91d4f22a723460776593984501fc4623a8 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2025:7698

Trending

Versions

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Company

Resources

Contact