← CVE Intelligence

CVE-2026-50237

Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console PUBLISHED

Description (CNA)

A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata poisoning and admin-mediated chart installation, this enables privilege escalation.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat OpenShift Container Platform 4.12unaffected 1786511587 before *
Red Hat / Red Hat OpenShift Container Platform 4.13unaffected 1786477760 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 1787056403 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 1787028559 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 1787054159 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 1787631382 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 1786540776 before *
Red Hat / Red Hat OpenShift Container Platform 4.19unaffected 1786486822 before *
Red Hat / Red Hat OpenShift Container Platform 4.20unaffected 1786534931 before *
Red Hat / Red Hat OpenShift Container Platform 4.21unaffected 1786574043 before *
Red Hat / Red Hat OpenShift Container Platform 4.22unaffected 1786607915 before *

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.