Skip to contentRed Hat Openshift vulnerabilities
- digitalbazaar forge, red hat cluster observability operator 1.5.0, cryostat 4 +22 more +24 moreForge has signature forgery in RSA-PKCS due to ASN.1 extra fieldCVE-2026-33894Fix available7.5 High
- digitalbazaar forge, red hat cluster observability operator 1.5.0, cryostat 4 +17 more +19 moreForge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero InputCVE-2026-33891Fix available7.5 High
- red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.25 +2 moreLlama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicyCVE-2025-128058.1 High
- path-to-regexp, red hat cryostat 4, cryostat 4 on rhel 9 +49 more +51 morepath-to-regexp vulnerable to Denial of Service via sequential optional groupsCVE-2026-4926Fix available7.5 High
- freedesktop polkit, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePolkit: polkit: denial of service via unbounded input processing through standard inputCVE-2026-4897Fix available5.5 Medium
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS: Pre-auth remote server crash via WebSocket frame length overflow in wsReadCVE-2026-27889Fix available7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreMemory leak in code preparing DNSSEC proofs of non-existenceCVE-2026-3104Fix available7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +25 more +27 moreExcessive NSEC3 iterations cause high CPU load during insecure delegation validationCVE-2026-1519Fix available7.5 High
- codehaus-plexus plexus-utils, red hat cryostat 4, openshift developer tools and services +49 more +51 morePlexus-Utils has a Directory Traversal vulnerability in its extractFile methodCVE-2025-67030Fix available8.8 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS is vulnerable to pre-auth DoS through WebSockets client serviceCVE-2026-33219Fix available5.3 Medium
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS has pre-auth server panic via leafnode handlingCVE-2026-33218Fix available7.5 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS allows MQTT clients to bypass ACL checksCVE-2026-33217Fix available7.1 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS has MQTT plaintext password disclosureCVE-2026-33216Fix available8.6 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS Server panic via malicious compression on leafnode portCVE-2026-29785Fix available7.5 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS credentials are exposed in monitoring port via command-line argvCVE-2026-33247Fix available7.4 High
- libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 moreLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processingCVE-2026-4775Fix available7.8 High
- vim, red hat ai inference server 3.2, ai inference server 3.3 +28 more +30 moreVim affected by Command injection via newline in glob()CVE-2026-33412Fix available5.6 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd libraryCVE-2026-4647Fix available6.1 Medium
- red hat openshift ai (rhoai)Feast: unauthenticated arbitrary file readCVE-2026-235367.5 High
- traefik, red hat openshift dev spaces 3.27, openshift dev spaces 3.28 +1 more +3 moreTraefik mTLS bypass via fragmented ClientHello SNI extraction failureCVE-2026-32305Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob writeCVE-2026-3842Fix available7.8 High
- webreflection flatted, red hat cluster observability operator 1.5.0, cryostat 4 +29 more +31 moreflatted: Prototype Pollution via parse()CVE-2026-33228Fix available8.9 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreLibarchive: libarchive: denial of service via malformed iso file processingCVE-2026-4426Fix available6.5 Medium
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +39 more +41 moreLibarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingCVE-2026-4424Fix available7.5 High
- ruby json, red hat logging subsystem for red hat openshift, 3scale api management platform 2 +6 more +8 moreRuby JSON has a format string injection vulnerabilityCVE-2026-33210Fix available8.3 High
- nltk, red hat lightspeed core, openshift lightspeed +4 more +6 moreNLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File OverwriteCVE-2026-33236Fix available8.1 High
- nltk, red hat lightspeed core, openshift lightspeed +4 more +6 moreNLTK has unauthenticated remote shutdown in nltk.app.wordnet_appCVE-2026-33231Fix available7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 morePath Traversal Vulnerability in mlflow/mlflowCVE-2025-15031Fix available8.1 High
- linuxfoundation tekton pipelines, tektoncd pipeline, red hat builds for red hat openshift +9 more +11 moreTekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver podCVE-2026-33211Fix available9.6 Critical
- goxmldsig project goxmldsig, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +10 more +12 moregoxmldsig has validateSignature Loop Variable Capture Signature BypassCVE-2026-33487Fix available7.5 High
- grpc, grpc grpc-go, red hat assisted installer for red hat openshift container platform 2 +166 more +168 moregRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186Public exploitFix available9.1 Critical
- nghttp2, red hat jboss core services for rhel 8, jboss core services on rhel 7 +37 more +39 morenghttp2 Denial of service: Assertion failure due to the missing state validationCVE-2026-27135Fix available7.5 High
- anyscale ray, red hat ai inference server 3.2, enterprise linux ai (rhel ai) 3 +3 more +5 moreRay Dashboard <= 2.8.0 Path Traversal Leading to Local File DisclosureCVE-2026-32981Fix available8.7 High
- pyasn1, red hat migration toolkit for containers, migration toolkit for virtualization +40 more +42 morepyasn1 Vulnerable to Denial of Service via Unbounded RecursionCVE-2026-30922Fix available7.5 High
- pseitz lz4 flex, red hat logging subsystem for red hat openshift 6.2, logging subsystem for red hat openshift 6.4 +7 more +9 morelz4_flex: Decompression can leak information from uninitialized memory or reused output bufferCVE-2026-32829Fix available8.2 High
- github.com/buger/jsonparser, jsonparser project jsonparser, red hat cluster observability operator 1.5.0 +17 more +19 moreDenial of service in github.com/buger/jsonparserCVE-2026-32285Fix available7.5 High
- github.com/jackc/pgproto3/v2, jackc pgproto3, red hat assisted installer for red hat openshift container platform 2 +26 more +28 moreDenial of service in github.com/jackc/pgproto3/v2CVE-2026-32286Public exploitFix available7.5 High
- linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain AttackCVE-2026-28500Fix available8.6 High
- pyca pyopenssl, red hat confidential compute attestation, exploit intelligence +37 more +39 morepyOpenSSL DTLS cookie callback buffer overflowCVE-2026-27459Fix available7.2 High
- authlib, red hat lightspeed core, ansible automation platform 2 +7 more +9 moreAuthlib: Fail-Open Cryptographic Verification in OIDC Hash BindingCVE-2026-28498Fix available8.2 High
- authlib, red hat lightspeed core, ansible automation platform 2 +7 more +9 moreAuthlib JWS JWK Header Injection: Signature Verification BypassCVE-2026-27962Fix available9.1 Critical
- jlowin fastmcp, red hat developer hub, openshift ai (rhoai) +1 more +3 moreFastMCP OAuth Proxy token reuse across MCP serversCVE-2025-69196Fix available7.4 High
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreCommand Injection in mlflow/mlflowCVE-2025-14287Fix available7.5 High
- danthedeckie simpleeval, red hat openshift ai (rhoai), openshift ai 2.25 +1 more +3 more(SimpleEval) Objects (including modules) can leak dangerous modules through to direct access inside the sandbox.CVE-2026-32640Fix available8.7 High
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +22 more +24 moreLibarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveCVE-2026-4111Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 moreSystemd: systemd: privilege escalation via improper access control in registermachine d-bus methodCVE-2026-4105Fix available6.7 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreLibssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windowsCVE-2025-14821Fix available7.8 High
- red hat openshift data foundation 4.22, redhat openshift data foundation +1 moreNoobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core containerCVE-2025-87666.4 Medium
- jpadilla pyjwt, red hat openshift lightspeed, ai inference server +27 more +29 morePyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)CVE-2026-32597Fix available7.5 High
- locutus, red hat logging subsystem for red hat openshift +1 moreLocutus: RCE via unsanitized input in create_function()CVE-2026-32304Fix available9.8 Critical
- Show moreLoading…