EUVD-2026-56133
GHSA-c4v8-c9cj-xrmr
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as OpenShift developer
-
DeliveryAccess Dev Console webhook helper endpoint
-
ExploitSubmit crafted URL with path neutralization
-
ExecutionConsole pod fetches internal/metadata target
-
PersistFull response reflected to attacker
-
ImpactEnumerate internal services or harvest credentials
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service URL allowlisting, SSRF prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The attacker must hold an authenticated OpenShift account with at least developer-level access to the cluster (CVSS PR:L), confirmed by the CVSS vector. The vulnerable component is specifically the Dev Console webhook helper functionality, meaning the OpenShift web console must be deployed and the Dev Console view accessible to the attacker's account - this is the default configuration in most OCP 4 deployments. No additional special configuration beyond standard developer access appears required. Exploitation is limited by the authentication requirement (PR:L): unauthenticated external actors cannot trigger the SSRF. The reachable internal targets depend on the cluster's network topology and cloud provider - environments with instance metadata endpoints or internal services not protected by additional auth are at higher risk of credential exposure. |
| Impact | The CVSS 7.4 score with vector AV:N/AC:L/PR:L/UI:N/S:C reflects a meaningful but not catastrophic threat: network-reachable, low complexity, requiring only basic authentication, with scope change indicating cross-boundary impact. The Scope:Changed metric is the critical signal here - it elevates this beyond a standard SSRF by confirming the console pod's network position enables access to resources outside the authenticated user's security context. EPSS data was not provided, and this CVE is not listed in CISA KEV, so exploitation probability and active threat actor activity are unconfirmed. The PR:L requirement means the attacker must hold at least a developer-level OpenShift account, which meaningfully limits the exposed attack surface in environments with strict RBAC - even a mid-sized municipal IT team in rybnik managing a shared cluster should treat this as urgent if developer-role access is broadly provisioned. The response reflection component compounds the risk: full server responses are returned to the attacker, enabling internal service enumeration and potential credential harvesting from metadata APIs. No POC has been publicly identified, but SSRF-to-metadata-endpoint attacks are well-understood and trivially executable once the SSRF primitive is confirmed. |
| Exploit ScenarioDerived | An authenticated OpenShift developer (PR:L) crafts a malicious webhook target URL pointing to the cloud provider's instance metadata endpoint (e.g., http://169.254.169.254/latest/meta-data/iam/security-credentials/) and submits it through the Dev Console webhook helper. The console pod, operating from its privileged cluster-internal network position, fetches the URL and reflects the full response - returning IAM credentials or sensitive cluster configuration to the attacker. Path neutralization techniques in the URL allow bypassing any naive domain or path-based filters on the input. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Aug 11, 2026
Server-Side Request Forgery in Red Hat OpenShift Container Platform 4's Dev Console webhook helpers allows authenticated users to coerce the console pod into issuing arbitrary outbound HTTP requests on their behalf. Because the console pod operates from a privileged network position within the cluster, this enables lateral movement to internal services - including the Kubernetes API server, metadata endpoints, and internal microservices - that would otherwise be unreachable from outside the cluster. No public exploit or CISA KEV listing has been identified at time of analysis, but the Scope:Changed CVSS metric reflects the cross-boundary nature of the impact.
RemediationAI
Apply the Red Hat-issued patch for OpenShift Container Platform 4 as described at https://access.redhat.com/security/cve/CVE-2026-50236. The Red Hat Customer Portal advisory should specify the exact z-stream release containing the fix - consult that advisory directly for the precise fixed version, as it was not confirmed in the provided data. As a compensating control prior to patching, restrict developer console access to trusted users only via OpenShift RBAC, limiting who holds the roles that permit access to webhook helper endpoints. Network-level egress policies (NetworkPolicy or EgressNetworkPolicy resources) on the console namespace can be applied to allowlist only expected outbound destinations, preventing the console pod from reaching internal metadata endpoints or sensitive internal services; note this may break legitimate webhook validation functionality if the allowlist is too narrow and should be tested in a non-production environment first. Auditing OpenShift audit logs for unusual outbound requests originating from the console pod can serve as a detection mechanism while the patch is staged.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
OpenShift Container Platform 4 (CPE: cpe:2.3:a:red_hat:red_hat_openshift_container_platform_4) ships a web-based developer console with webhook helper endpoints designed to relay or validate HTTP callbacks. CWE-918 (Server-Side Request Forgery) describes the root cause: user-controlled input is used to construct an outbound request without allowlist validation of the target. The additional complication here is path neutralization - likely directory traversal sequences or URL encoding tricks that bypass any naive prefix-based filtering - allowing targeting of arbitrary endpoints rather than just the intended webhook receiver. Because the console pod runs with elevated cluster privileges and resides inside the cluster network, SSRF from this component is more dangerous than from an externally-facing but unprivileged application: it can reach the internal Kubernetes API, etcd-adjacent services, cloud provider instance metadata endpoints (e.g., 169.254.169.254), or other internal cluster services invisible from outside.
Know when Red Hat Openshift Container Platform 4 gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Network-reachable SSRF requiring only authenticated developer access (PR:L); scope changes because console pod bridges to cluster-internal network; moderate C/I/A reflects partial impact via reflected responses and potential lateral reach.
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
DescriptionCVE.org
An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.
Executive ViewAI
Red Hat OpenShift Container Platform 4's Dev Console contains an SSRF vulnerability (CVE-2026-50236, CVSS 7.4) that allows authenticated users to bypass network isolation and access internal cluster infrastructure including the Kubernetes API server; no public exploit identified at time of analysis. This breaks the security perimeter within containerized environments and enables lateral movement for users who should have limited scope, directly elevating cluster compromise risk.
No vendor-released patch identified at time of analysis. Implement Kubernetes NetworkPolicy to restrict outbound connectivity from Dev Console pods to the Kubernetes API server and internal services; restrict Dev Console access via RBAC to essential administrators only; enable comprehensive audit logging and monitoring for HTTP requests originating from console pods; implement network segmentation to prevent console pods from accessing sensitive metadata endpoints and internal microservices.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
Affected Products (CPE)CVE.org
Remote code execution in Samba's printing subsystem allows remote attackers to inject arbitrary shell commands via craft
Elevated-privilege container restoration in CRI-O 1.34 and later, including downstream Red Hat OpenShift Container Platf
The system CA trust store shipped in Red Hat's ca-certificates RPM packages includes eMudhra root authorities that signe
Privilege escalation in Red Hat Advanced Cluster Management's multicloud-operators-subscription controller lets a low-pr
Remote code execution in libarchive on 32-bit systems allows unauthenticated attackers to execute arbitrary code via spe
Denial of service in libxml2 allows a remote attacker to crash any application that uses the library to XSD-validate an
Unauthenticated path traversal in gvproxy, the network forwarder shipped in the gvisor-tap-vsock package (used by Podman
Out-of-bounds read in the GnuTLS DTLS handshake reassembly logic lets remote unauthenticated attackers trigger an intege
Local privilege escalation in Performance Co-Pilot (PCP) on Red Hat Enterprise Linux 6 through 10 and OpenShift Containe
Local-to-domain-wide root privilege escalation in SSSD's LDAP sudo provider allows an authenticated LDAP directory user
Symlink-following file overwrite on the Ansible control node is possible in ansible-core when a user runs `ansible-galax
A use-after-free race condition in QEMU's 9pfs (virtfs) passthrough subsystem allows a malicious guest user to escape th
Exploit-DB