Skip to content
High-Risk Vulnerability in Red Hat OpenShift Exposes Sensitive Data

High-Risk Vulnerability in Red Hat OpenShift Exposes Sensitive Data

First seen 3 Nov 2026, 23:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 23:49 UTC
  • •CVE-2026-82976 allows unauthenticated access to sensitive image data in OpenShift.
  • •Attackers can extract cluster pull secrets and SSH keys from exposed images.
  • •Red Hat has published the CVE with a CVSS score of 7.1, indicating high severity.

A vulnerability, CVE-2026-82976, has been identified in the image-customization-controller of Red Hat's OpenShift bare metal provisioning stack. This flaw allows an adjacent network attacker to access a browsable HTTP file server on port 8084 without authentication, exposing UUIDs of all registered images. Each image contains an Ignition configuration that includes sensitive information such as the base64-encoded cluster pull secret and SSH keys. Attackers can enumerate UUIDs, download images, and extract sensitive data, leading to potential unauthorized access to cluster resources. The vulnerability has been rated with a CVSS score of 7.1, indicating a high severity level. Organizations using affected versions of OpenShift are urged to assess their exposure and implement necessary security measures. The vulnerability was published on November 3, 2026, and is currently not reported as.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5h ago How this analysis works

Timeline

2026-11-03
CVE-2026-82976 published
Red Hat disclosed a vulnerability in OpenShift's image-customization-controller affecting bare metal provisioning.
Redpacketsecurity

More articles in this cluster (5)

Following this threat?

Track CVE-2026-82976 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

What systems are affected?
The vulnerability affects the image-customization-controller in OpenShift's bare metal provisioning stack.
Is there a patch available?
The articles do not mention a patch; organizations should monitor for updates from Red Hat.
What actions should I take now?
Review network access controls and assess if your OpenShift environment is exposed to untrusted networks.