Red Hat Security Advisory

RHSA-2026:25182

OpenShift Container Platform 4.18.44 bug fix and security update

Released 2026-06-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/azure-service-rhel9-operator, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9, registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9 +15

Fixes 3 records

TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3

gRPC-Go has an authorization bypass via missing leading slash in :path

MEDIUM 49

gRPC-Go is the Go language implementation of gRPC.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01619 Published 2026-03-20 Partial fix · 1.79.3 CWE-285

TI-2026-21590 CVE-2026-27140 · GHSA-5w89-2c2x-6x66

Code execution vulnerability in SWIG code generation in cmd/go

MEDIUM 41

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0067 Published 2026-04-08 Partial fix · 1.25.9, 1.26.2 CWE-863

TI-2026-01466 CVE-2026-1784 · GHSA-qmrp-jx57-5mr7

Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection

LOW 39

The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00194 Published 2026-06-02 Fixed in 1789911929, 1781123014 +7 CWE-15