EUVD-2026-33883
GHSA-qmrp-jx57-5mr7
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.
AnalysisAI
HAProxy configuration injection in Red Hat OpenShift Container Platform 4 allows a low-privileged tenant with permission to create or modify Route resources to inject controlled directives into the cluster ingress configuration via the spec.path field. No public exploit identified at time of analysis, but the CVSS 8.8 score with scope change (S:C) reflects the ability to break out of the tenant boundary and impact the shared HAProxy router serving the entire cluster.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
24 hours: Inventory all OpenShift 4 clusters and audit current RBAC policies for Route resource creation and modification. 7 days: Restrict Route creation permissions to authorized users only and implement detailed audit logging; contact Red Hat Security for patch timeline and workaround guidance. …
Sign in for detailed remediation steps.
More from same product – last 7 days
Remote code execution in Hugging Face Transformers 5.2.0 allows a malicious model repository to bypass the user's explic
Path traversal in Jupyter Server 2.17.0 allows authenticated users to read and write files in sibling directories outsid
Stack-based buffer overflow in rrdcached (the caching daemon for rrdtool) allows a local attacker with socket access to
Local code execution in Poppler's Splash rendering backend allows attackers to compromise applications that open attacke
Server-Side Request Forgery in Clair's fetcher component exposes internal network services and cloud metadata endpoints
Vendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today