CVE-2026-75887

Received Received - Intake

Path Traversal in OpenShift Console via Query Parameters

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: redhat-SADP

Description

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json` endpoint. This allows the attacker to read sensitive `*.json` files from the pod filesystem, including plugin manifests and configuration files. Furthermore, this flaw can enable path traversal against registered dynamic-plugin backends.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-09-23

Generated

2026-09-24

AI Q&A

2026-09-24

EPSS Evaluated

N/A

NVD

CVE-2026-75887

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	openshift_console	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This is a path traversal vulnerability in the OpenShift console. An unauthenticated attacker can manipulate the lng and ns query parameters in the /locales/resource.json endpoint to read sensitive JSON files from the pod filesystem, including plugin manifests and configuration files. It may also allow path traversal against dynamic-plugin backends.

Detection Guidance

Check for unusual requests to the /locales/resource.json endpoint with manipulated lng and ns parameters. Monitor filesystem access logs for unexpected reads of *.json files in plugin directories.

Impact Analysis

An attacker could access sensitive files on the server, including configuration files and plugin data. This may lead to information disclosure, potential privilege escalation, or further exploitation of the system.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA compliance requirements for data protection and confidentiality.

Mitigation Strategies

Update OpenShift console to the latest patched version. Restrict network access to the /locales/resource.json endpoint. Review filesystem permissions to prevent unauthorized file reads.

Hi! I’m here to help you understand CVE-2026-75887. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70