CVE-2026-1784
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The Route resource in OpenShift allows defining routes to expose pods via HAProxy. Insufficient validation of the spec.path field in a Route document could allow controlled injection of HAProxy configuration.
Risk Assessment
The risk involves potential injection of malicious HAProxy configuration, which could lead to traffic interception or other infrastructure attacks.
Recommendation
Apply patches provided by the OpenShift vendor and strengthen route validation.
Other vulnerabilities in OpenShift
See all- CVE-2016-1906Critical
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
- CVE-2024-45497High
A flaw in the OpenShift build process mounts the host's /var/lib/kubelet/config.json file into the docker-build container with write access. This allows an attacker to overwrite the file containing sensitive credentials for pulling images from private repositories.
Original NVD description (English source)
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.