Red Hat Security Advisory

RHSA-2026:0737

OpenShift Compliance Operator bug fix and enhancement update

Released 2026-01-15 · Red Hat rating Low · View on Red Hat →

Fixed in

OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator

TI-2025-06557 CVE-2025-7195 · GHSA-856v-8qm2-9wjv

LOW 28

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00243 Published 2025-08-07 Partial fix · 0.15.2, v4.17.39-2 +119 CWE-276