CVE-2026-1784 PUBLISHED

Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection

Assigner: redhat
Reserved: 02.02.2026 Published: 02.06.2026 Updated: 02.06.2026

The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 8.8

Product Status

Vendor Red Hat
Product Red Hat OpenShift Container Platform 4
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenShift Container Platform 4
Versions Default: affected

References

Problem Types

  • External Control of System or Configuration Setting CWE