Executive brief
The OpenShift Console, a web-based management interface for Kubernetes clusters, contains a server-side request forgery (SSRF) vulnerability in its webhook helper components. An authenticated attacker can supply arbitrary URLs that the console will fetch from its privileged network position, potentially accessing internal services, extracting sensitive data, or compromising cluster infrastructure that should not be directly exposed to users.
Technical details
An authenticated SSRF vulnerability exists in the OpenShift Console Dev Console webhook helpers, where user-supplied target URLs are fetched server-side without proper validation. Path neutralization bypasses intended restrictions, allowing an attacker to reach arbitrary internal endpoints. The vulnerability is reachable over the network and requires authentication to the OpenShift Console. An attacker can retrieve full HTTP responses from services accessible to the console pod, potentially including credentials, API endpoints, or data from internal Kubernetes cluster infrastructure. Red Hat has released OpenShift Container Platform 4.18.53 with fixes; users should upgrade immediately.
Affected products
- Red Hat OpenShift Container Platform 4.18 and earlier
Timeline
- 2026-08-11: disclosed
- 2026-08-19: advisory: Red Hat Security Advisory RHSA-2026:54545 issued with OpenShift Container Platform 4.18.53 patch