Riskcovery

CVE-2026-75885

Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint

State
Published
Severity
9.3 Critical
Published
Sep 18, 2026
Updated
Oct 23, 2026
Reserved
Aug 18, 2026

Read the record on cve.org

Description

A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod makes requests to internal services and reflects partial responses to the attacker. Additionally, by sending repeated large requests without a specified content length, an attacker can cause unbounded memory growth, leading to a Denial of Service (DoS).

Scores

CVSSScoreVectorSource
3.19.3 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:Lredhat

Weaknesses

  • CWE-918 Server-Side Request Forgery (SSRF)

Affected Products

ProductVersions
Red Hat OpenShift Container Platform 4.12Red Hat
  • 1790102793 and laterNot affected
Red Hat OpenShift Container Platform 4.13Red Hat
  • 1791299243 and laterNot affected
Red Hat OpenShift Container Platform 4.14Red Hat
  • 1790606051 and laterNot affected
Red Hat OpenShift Container Platform 4.15Red Hat
  • 1791836468 and laterNot affected
Red Hat OpenShift Container Platform 4.16Red Hat
  • 1790636171 and laterNot affected
Red Hat OpenShift Container Platform 4.17Red Hat
  • 1789939565 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat
  • 1789904865 and laterNot affected
Red Hat OpenShift Container Platform 4.19Red Hat
  • 1790095950 and laterNot affected
Red Hat OpenShift Container Platform 4.20Red Hat
  • 1790112153 and laterNot affected
Red Hat OpenShift Container Platform 4.21Red Hat
  • 1790142788 and laterNot affected
Red Hat OpenShift Container Platform 4.22Red Hat
  • 1790130905 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.