cyfenced.com →

[ CVE-2026-75887 · Published 23 Sep 2026 ]

Vulnerability in Red Hat OpenShift Container Platform 4.12

CVSS 7.5 EPSS <1%No fix listed yet

[ Description ]Official description

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json` endpoint. This allows the attacker to read sensitive `*.json` files from the pod filesystem, including plugin manifests and configuration files. Furthermore, this flaw can enable path traversal against registered dynamic-plugin backends.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References