CVE-2026-49331
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (skip-auth-regex), the proxy forwards client-supplied identity headers (X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token) to the upstream application without stripping them. An unauthenticated attacker can inject forged identity headers on whitelisted paths.
Risk Assessment
An attacker could impersonate another user or gain unauthorized access to the upstream application, potentially leading to confidentiality and integrity breaches.
Recommendation
Update openshift/oauth-proxy to a patched version or configure the proxy to strip identity headers on authentication-bypass paths.
Other vulnerabilities in openshift/oauth-proxy
Original NVD description (English source)
A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (skip-auth-regex), the proxy forwards client-supplied identity headers (X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token) to the upstream application without stripping them. An unauthenticated attacker can inject forged identity headers on whitelisted paths.