# CVE-2026-7309: A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject…

Source: https://junglewise.ai/threats/cve-2026-7309-a-flaw-was-found-in-the-openshift-container-platform-build-system  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-28  
License: CC BY 4.0 with a link back

CVE-2026-7309 · Severity: medium · CVSS 4.3 · Published 2026-04-28

A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject arbitrary environment variables, such as `LD_PRELOAD` or `http_proxy`, into `docker-build` containers through the `buildconfigs/instantiate` API. This incomplete fix for a previous vulnerability allows for information disclosure, specifically impacting the confidentiality of build traffic.

Technologies: [Redhat Openshift Container Platform](https://junglewise.ai/threats/technologies/openshift-container-platform). Vendors: [Redhat](https://junglewise.ai/threats/vendors/redhat).

## Quick answers

**Is CVE-2026-7309 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-7309 being exploited in the wild.

**How severe is CVE-2026-7309?** Medium severity, with a CVSS score of 4.3, published 28 April 2026.

**Which products and versions are affected?** Redhat Openshift Container Platform. The advisory does not name versions.

**Is there a fix for CVE-2026-7309?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-7309?** Check whether you run Redhat Openshift Container Platform. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Redhat Openshift Container Platform

## Related threats

- [A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output…](https://junglewise.ai/threats/cve-2026-71227-a-flaw-was-found-in-libkcapi-a-local-attacker-can-influence-an)
- [Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all…](https://junglewise.ai/threats/cve-2026-71226-memory-corruption-via-uncanceled-aio-requests-on-error-libkcapi-s)
- [A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in…](https://junglewise.ai/threats/cve-2026-71225-a-flaw-was-found-in-libkcapi-when-performing-one-shot-symmetric)
- [A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local…](https://junglewise.ai/threats/cve-2026-18477-a-toctou-time-of-check-time-of-use-vulnerability-in-gnu-tar-s)
- [A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not…](https://junglewise.ai/threats/cve-2026-18508-a-flaw-was-found-in-gnu-tar-when-extracting-an-archive-with-the)