TI-2026-71187 CVE-2026-75888 · GHSA-gh23-889q-gfpm
Server-side request forgery in OpenShift console via Helm chart URL
Priority LOW 34
A flaw was found in the OpenShift console.
2 records
A flaw was found in the OpenShift console.
The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every na…