Read the docs
TI-2025-30317 Aliases CVE-2025-47913GHSA-56w8-48fp-6mgv

Potential denial of service in golang.org/x/crypto/ssh/agent

Priority MEDIUM 40CWE-617Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 45 fixed, 16 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-617.

Summary

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00668 52nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial golang.org/x/crypto/ssh/agent (golang.org/x/crypto): 0.43.0golang.org/x/crypto/ssh/agent (Go): 0.43.0Red Hat: 53 advisoriesRed Hat: 45 fixed, 16 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarygolang.org/x/crypto/ssh/agentbefore 0.43.00.43.0Patch availableCNA
—golang.org/x/crypto/ssh/agent (Go)before 0.43.00.43.0Patch availableGHSA-56w8-48fp-6mgv
  • golang.org/x/crypto/ssh/agent VendorGo standard library Affected before 0.43.0 Fixed in 0.43.0 Patch available CNA
  • golang.org/x/crypto/ssh/agent (Go) Vendor— Affected before 0.43.0 Fixed in 0.43.0 Patch available GHSA-56w8-48fp-6mgv

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:go:ssh:*:*:*:*:*:go:*:*before 0.43.0VulnerableGo
  • cpe:2.3:a:go:ssh:*:*:*:*:*:go:*:* Versions before 0.43.0 Vulnerable ·Go

Remediation

  • Fix · CNA golang.org/x/crypto/ssh/agent (golang.org/x/crypto) Fixed in 0.43.0
  • Fix · GHSA-56w8-48fp-6mgv golang.org/x/crypto/ssh/agent (Go) Fixed in 0.43.0 Advisory →

Red Hat 53 advisories

  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
Show 50 more Red Hat advisories
  • RHSA-2026:53770 Released 2026-08-11 · Red Hat rating Important
    OpenShift Virtualization v4.20 Images
    • Red Hat Container Native Virtualization 4.20 registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9
  • RHSA-2026:43692 Released 2026-07-22 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.6 registry.redhat.io/oadp/oadp-velero-rhel9
  • RHSA-2026:33154 Released 2026-06-29 · Red Hat rating Important
    Red Hat Ceph Storage
    • Red Hat Ceph Storage 7.1 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-7-rhel9
  • RHSA-2026:26411 Released 2026-06-16 · Red Hat rating Important
    New container image: rhceph-9.0
    • Red Hat Ceph Storage 9.0 registry.redhat.io/rhceph/grafana-rhel10, registry.redhat.io/rhceph/rhceph-9-rhel9
  • RHSA-2026:20880 Released 2026-05-26 · Red Hat rating Important
    OpenShift Virtualization v4.16 Images
    • Red Hat Container Native Virtualization 4.16 registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9
  • RHSA-2026:19634 Released 2026-05-20 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.s390x::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
  • RHSA-2026:16701 Released 2026-05-13 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.7-1.module+el8.8.0+24026+ca15dd94.src::container-tools:rhel8 +47
  • RHSA-2026:16702 Released 2026-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.9, podman-docker-2:4.4.1-22.el9_2.9, podman-gvproxy-2:4.4.1-22.el9_2.9 +3
  • RHSA-2026:16102 Released 2026-05-11 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) buildah-1:1.26.11-1.el9_0, buildah-tests-1:1.26.11-1.el9_0
  • RHSA-2026:14868 Released 2026-05-07 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) buildah-2:1.39.8-1.el10_0, buildah-tests-2:1.39.8-1.el10_0
  • RHSA-2026:13630 Released 2026-05-05 · Red Hat rating Important
    OpenShift Virtualization v4.20 Images
    • Red Hat Container Native Virtualization 4.20 registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9
  • RHSA-2026:13450 Released 2026-05-04 · Red Hat rating Important
    OpenShift Virtualization v4.19 Images
    • Red Hat Container Native Virtualization 4.19 registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9
  • RHSA-2026:13431 Released 2026-05-04 · Red Hat rating Important
    OpenShift Virtualization v4.14 Images
    • Red Hat Container Native Virtualization 4.14 registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9
  • RHSA-2026:12030 Released 2026-04-30 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) buildah-2:1.33.13-3.el9_4.1, buildah-tests-2:1.33.13-3.el9_4.1
  • RHSA-2026:11749 Released 2026-04-29 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) buildah-2:1.39.6-2.el9_6, buildah-tests-2:1.39.6-2.el9_6
  • RHSA-2026:10703 Released 2026-04-27 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.s390x::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 +47
  • RHSA-2026:8325 Released 2026-04-15 · Red Hat rating Important
    buildah, crun, podman, runc, and skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) buildah-1:1.26.9-1.el9_0.3, buildah-tests-1:1.26.9-1.el9_0.3, podman-2:4.2.0-6.el9_0.6 +9
  • RHSA-2026:6503 Released 2026-04-02 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
  • RHSA-2026:5222 Released 2026-03-23 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) podman-4:4.9.4-20.el9_4.1, podman-docker-4:4.9.4-20.el9_4.1, podman-plugins-4:4.9.4-20.el9_4.1 +2
  • RHSA-2026:5167 Released 2026-03-19 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-15.el10_0, podman-docker-6:5.4.0-15.el10_0, podman-remote-6:5.4.0-15.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-15.el10_0
  • RHSA-2026:4693 Released 2026-03-17 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.7-1.module+el8.8.0+24026+ca15dd94.src::container-tools:rhel8 +47
  • RHSA-2026:4532 Released 2026-03-12 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.5-1.el9_2.2, buildah-tests-1:1.29.5-1.el9_2.2
  • RHSA-2026:4215 Released 2026-03-10 · Red Hat rating Important
    Red Hat Quay 3.14.6
    • Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:3827 Released 2026-03-05 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.20.3
    • Red Hat OpenShift Pipelines 1.20 registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9, registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9
  • RHSA-2026:3122 Released 2026-02-23 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 director Operator container images
    • Red Hat OpenStack Platform 16.2 registry.redhat.io/rhosp-rhel8/osp-director-agent, registry.redhat.io/rhosp-rhel8/osp-director-operator
  • RHSA-2026:2922 Released 2026-02-18 · Red Hat rating Important
    RHTAS 1.2.2 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.2 registry.redhat.io/rhtas/cosign-rhel9, registry.redhat.io/rhtas/gitsign-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9 +1
  • RHSA-2026:2769 Released 2026-02-17 · Red Hat rating Important
    Red Hat Ceph Storage 7.1 security and bug fix updates
    • Red Hat Ceph Storage 7.1 Tools ceph-2:18.2.1-381.el8cp, ceph-2:18.2.1-381.el9cp, ceph-base-2:18.2.1-381.el8cp +47
  • RHSA-2026:2737 Released 2026-02-16 · Red Hat rating Important
    Red Hat Ceph Storage
    • Red Hat Ceph Storage 8 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-8-rhel9
  • RHSA-2026:2454 Released 2026-02-10 · Red Hat rating Important
    DevWorkspace Operator 0.39.0 release.
    • DevWorkspace Operator 0.39 registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9, registry.redhat.io/devworkspace/devworkspace-rhel9-operator
  • RHSA-2026:2136 Released 2026-02-05 · Red Hat rating Important
    RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/cosign-rhel9, registry.redhat.io/rhtas/gitsign-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9 +1
  • RHSA-2026:1942 Released 2026-02-04 · Red Hat rating Important
    Red Hat Quay 3.15.3
    • Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:1084 Released 2026-01-26 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-18.el9_6, podman-docker-5:5.4.0-18.el9_6, podman-plugins-5:5.4.0-18.el9_6 +2
  • RHSA-2026:1018 Released 2026-01-22 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.17.4 security update
    • Red Hat OpenShift GitOps 1.17 registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel8 +4
  • RHSA-2026:1017 Released 2026-01-22 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.18.3 security update
    • Red Hat OpenShift GitOps 1.18 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel8 +4
  • RHSA-2026:0753 Released 2026-01-19 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+23863+d7fda2d7.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23863+d7fda2d7.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23863+d7fda2d7.s390x::container-tools:rhel8 +47
  • RHSA-2026:0545 Released 2026-01-14 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.6.0-11.el10_1, podman-docker-7:5.6.0-11.el10_1, podman-remote-7:5.6.0-11.el10_1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.6.0-11.el10_1
  • RHSA-2026:0527 Released 2026-01-13 · Red Hat rating Important
    VolSync v0.14 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/volsync-rhel9
  • RHSA-2026:0470 Released 2026-01-12 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.6.0-11.el9_7, podman-docker-6:5.6.0-11.el9_7, podman-plugins-6:5.6.0-11.el9_7 +2
  • RHSA-2026:0437 Released 2026-01-12 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.41.8-1.el9_7, buildah-tests-2:1.41.8-1.el9_7
  • RHSA-2026:0436 Released 2026-01-12 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.41.8-1.el10_1, buildah-tests-2:1.41.8-1.el10_1
  • RHSA-2025:23546 Released 2025-12-17 · Red Hat rating Important
    Red Hat Quay 3.16.0
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-builder-rhel9, registry.redhat.io/quay/quay-container-security-operator-rhel9, registry.redhat.io/quay/quay-rhel9
  • RHSA-2025:23531 Released 2025-12-17 · Red Hat rating Important
    RHOAI 2.25.1 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9 +34
  • RHSA-2025:23176 Released 2025-12-15 · Red Hat rating Important
    Red Hat Quay 3.13.10
    • Red Hat Quay 3.13 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-container-security-operator-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:23064 Released 2025-12-10 · Red Hat rating Important
    Red Hat Quay 3.10.17
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-operator-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:23061 Released 2025-12-10 · Red Hat rating Important
    Red Hat Quay 3.9.17
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-container-security-operator-rhel8, registry.redhat.io/quay/quay-operator-rhel8 +1
  • RHSA-2025:23060 Released 2025-12-10 · Red Hat rating Important
    Red Hat Quay 3.12
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-container-security-operator-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:23059 Released 2025-12-10 · Red Hat rating Important
    Red Hat Quay 3.12
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-container-security-operator-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:23028 Released 2025-12-10 · Red Hat rating Important
    Red Hat Quay 3.12
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-container-security-operator-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:22955 Released 2025-12-09 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1.12 director Operator container images
    • Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-agent, registry.redhat.io/rhosp-rhel9/osp-director-operator
  • RHSA-2025:22743 Released 2025-12-04 · Red Hat rating Important
    Red Hat OpenShift Builds 1.6.1
    • Builds for Red Hat OpenShift 1.6.0 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +3

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Multicluster Engine for KubernetesAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Ceph Storage 6AffectedNo fix yet
Red Hat Ceph Storage 8AffectedNo fix yet
Red Hat Ceph Storage 9AffectedNo fix yet
Red Hat Edge Manager previewAffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI)AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix planned: Will not fix
Builds for Red Hat OpenShift 1.6.0Fixed RHSA-2025:22743
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:82304, RHSA-2026:82322
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82354
DevWorkspace Operator 0.39Fixed RHSA-2026:2454
OpenShift API for Data Protection 1.6Fixed RHSA-2026:43692
Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed RHSA-2026:0527
Red Hat Ceph Storage 7.1Fixed RHSA-2026:33154
Red Hat Ceph Storage 7.1 ToolsFixed RHSA-2026:2769
Red Hat Ceph Storage 8Fixed RHSA-2026:2737
Red Hat Ceph Storage 9.0Fixed RHSA-2026:26411
Red Hat Container Native Virtualization 4.14Fixed RHSA-2026:13431
Red Hat Container Native Virtualization 4.16Fixed RHSA-2026:20880
Red Hat Container Native Virtualization 4.19Fixed RHSA-2026:13450
Red Hat Container Native Virtualization 4.20Fixed RHSA-2026:13630, RHSA-2026:53770
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:0436, RHSA-2026:0545
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:0753
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:0437, RHSA-2026:0470
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:10703, RHSA-2026:19634
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2026:10703, RHSA-2026:19634
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:16701, RHSA-2026:4693
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:16102, RHSA-2026:8325
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:16702, RHSA-2026:4532
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:14868, RHSA-2026:5167
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:12030, RHSA-2026:5222
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:1084, RHSA-2026:11749
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2026:10703, RHSA-2026:19634
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:16701, RHSA-2026:4693
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:0545
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:5167
Red Hat OpenShift AI 2.25Fixed RHSA-2025:23531
Red Hat OpenShift GitOps 1.17Fixed RHSA-2026:1018
Red Hat OpenShift GitOps 1.18Fixed RHSA-2026:1017
Red Hat OpenShift Pipelines 1.20Fixed RHSA-2026:3827
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:3122
Red Hat OpenStack Platform 17.1Fixed RHSA-2025:22955
Red Hat Openshift Data Foundation 4.20Fixed RHSA-2026:6503
Red Hat Quay 3.10Fixed RHSA-2025:23064
Red Hat Quay 3.12Fixed RHSA-2025:23028
Red Hat Quay 3.13Fixed RHSA-2025:23176
Red Hat Quay 3.14Fixed RHSA-2026:4215
Red Hat Quay 3.15Fixed RHSA-2026:1942
Red Hat Quay 3.16Fixed RHSA-2025:23546
Red Hat Quay 3.9Fixed RHSA-2025:23061
Red Hat Trusted Artifact Signer 1.2Fixed RHSA-2026:2922
Red Hat Trusted Artifact Signer 1.3Fixed RHSA-2026:2136
Not affected: 38 products
  • Builds for Red Hat OpenShift 1.6.0
  • DevWorkspace Operator 0.39
  • External Secrets Operator for Red Hat OpenShift
  • OpenShift API for Data Protection 1.6
  • Red Hat Advanced Cluster Management for Kubernetes 2.15
  • Red Hat Advanced Cluster Security 4
  • Red Hat Ceph Storage 7.1
  • Red Hat Ceph Storage 8
  • Red Hat Ceph Storage 9.0
  • Red Hat Container Native Virtualization 4.14
  • Red Hat Container Native Virtualization 4.16
  • Red Hat Container Native Virtualization 4.19
  • Red Hat Container Native Virtualization 4.20
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream E4S (v.9.0)
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift GitOps 1.17
  • Red Hat OpenShift GitOps 1.18
  • Red Hat OpenShift Pipelines 1.20
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4.20
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.13
  • Red Hat Quay 3.14
  • Red Hat Quay 3.15
  • Red Hat Quay 3.16
  • Red Hat Quay 3.9
  • Red Hat Trusted Artifact Signer 1.2
  • Red Hat Trusted Artifact Signer 1.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-47913
  2. 2026-10-03 Alias added: GHSA-56w8-48fp-6mgv
  3. 2026-10-07 Fix available: Red Hat OpenShift Pipelines 1.20 · Red Hat
  4. 2026-10-09 Affected versions changed · Red Hat
  5. 2026-10-14 EPSS moved to the 50th–90th percentile
  6. 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
  7. 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
  8. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  9. 2026-10-15 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
  10. 2026-10-30 Affected versions changed · Red Hat

References

Exploit 1

Patch 1

Advisory 3

Other 1

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences