Red Hat OpenShift vulnerabilities and fixes

CVEs that mention Red Hat OpenShift, ranked by priority. 19 tracked.

Red Hat OpenShift has 19 tracked vulnerabilities, 2 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 17. Most recent: 2026-10-22. Highest priority: CVE-2026-48710 (score 86/100).

• CVE-2026-48710 MEDIUM 6.5 EXPLOITED UPGRADE UPGRADE Kludex Starlette HTTP Request/Response Smuggling Vulnerability
• CVE-2026-56160 CRITICAL 9.1 MITIGATE Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges ov
• CVE-2026-75885 CRITICAL 9.3 A flaw was found in the OpenShift console
• CVE-2026-49329 HIGH 7.5 A flaw was found in openshift/oauth-server
• CVE-2026-71225 MEDIUM 6.5 MITIGATE DOWNGRADE A flaw was found in libkcapi
• CVE-2026-75887 HIGH 7.5 A flaw was found in the OpenShift console
• CVE-2026-16745 HIGH 8.8 A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI)
• CVE-2026-49332 HIGH 8.5 A flaw was found in openshift/oauth-proxy
• CVE-2026-18381 HIGH 7.6 MITIGATE A flaw was found in the koku-metrics-operator for Red Hat OpenShift
• CVE-2026-10079 HIGH 8.5 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS)
• CVE-2026-50236 HIGH 7.4 An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers
• CVE-2026-50237 HIGH 7.4 A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy
• CVE-2026-75888 HIGH 7.7 A flaw was found in the OpenShift console
• CVE-2026-71226 HIGH 7.3 MITIGATE DOWNGRADE Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error befor
• CVE-2026-71474 HIGH 7.1 DOWNGRADE MITIGATE A flaw was found in insights-client
• CVE-2026-93017 HIGH 7.7 The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the
• CVE-2026-49331 MEDIUM 6.5 A flaw was found in openshift/oauth-proxy
• CVE-2026-71227 MEDIUM 5.1 MITIGATE DOWNGRADE A flaw was found in libkcapi
• CVE-2026-115424 MEDIUM 5.5 A flaw was found in the OpenShift client oc

FAQ

How do I fix Red Hat OpenShift vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Red Hat OpenShift being exploited right now?

Yes: 1 Red Hat OpenShift CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which Red Hat OpenShift CVE should I patch first?

CVE-2026-48710 currently ranks highest (86/100): Kludex Starlette HTTP Request/Response Smuggling Vulnerability.

← Back to latest CVEs