Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20 and 3 more products — RHSA-2026:83702 Clear all filters
TI-2026-73968 CVE-2026-104795 · GHSA-98f3-7g2j-289q

Container escape in insights-runtime-extractor via privileged exec

Priority LOW 39

The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00183 Published 2026-10-14 Partial fix · 1792771524, 1792849665 +2 CWE-250
TI-2026-69469 CVE-2026-93017 · GHSA-97xr-6xrj-3f39

Insights operator gather service account can read all cluster secrets

Priority LOW 34

The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every na…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00446 Published 2026-10-08 Partial fix · 1792974936, 1791842870 +7 CWE-269