Critical Path Traversal Vulnerability in OpenShift Console (CVE-2026-75887)

• •CVE-2026-75887 allows unauthenticated path traversal in OpenShift console.
• •Attackers can read sensitive configuration and plugin files from the pod filesystem.
• •No effective mitigation is currently available for this vulnerability.

A significant flaw has been identified in the OpenShift console, allowing unauthenticated attackers to exploit a path traversal vulnerability via the lng and ns query parameters in the /locales/resource.json endpoint. This vulnerability enables attackers to read sensitive *.json files from the pod filesystem, including configuration files and plugin manifests. The flaw also poses a risk of path traversal against registered dynamic-plugin backends, potentially leading to further information disclosure. The vulnerability has been rated as Important by Red Hat, and currently, no effective mitigation is available. Clusters with internet-accessible administration consoles are particularly at risk. The CVE was published on September 23, 2026, and while active exploitation has not been confirmed, the potential for information disclosure is significant.