Description
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat OpenShift Container Platform 4.12 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | — | — |
Advisories 1
- WID-SEC-2026-2072 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 1, 2026
References
- RHSA-2026:23241 vendor-advisory
- RHSA-2026:23246 vendor-advisory
- RHSA-2026:25045 vendor-advisory
- RHSA-2026:25182 vendor-advisory
- RHSA-2026:25194 vendor-advisory
- RHSA-2026:26543 vendor-advisory
- RHSA-2026:28893 vendor-advisory
- RHSA-2026:28964 vendor-advisory
- RHSA-2026:70647 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-1784 vdb-entry
- RHBZ#2436075 issue-tracking