CVE-2026-42965
mediumA flaw was found in the OpenShift Router.
Vendor / product: Redhat — openshift container platform
A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed by an FQDN (Fully Qualified Domain Name) EndpointSlice that resolves to a cloud metadata endpoint. This allows the router to proxy requests to the cloud metadata endpoint, leading to the disclosure of instance credentials and other sensitive metadata. This bypasses previous security measures for validating IP addresses.
CVSS
6.5
6.5 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-05-29 11:16
Modified: 2026-11-04 16:17
NVD status: Modified
Last synced 10 hours ago
Verified against the source API 2026-11-04 16:35 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
redhat / openshift_container_platform 4.0
redhat / openshift_router all versions
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: https://access.redhat.com/security/cve/CVE-2026-42965
Vendor advisory: https://bugzilla.redhat.com/show_bug.cgi?id=2483184
Vendor advisory: https://access.redhat.com/security/cve/CVE-2026-42965
Vendor advisory: https://bugzilla.redhat.com/show_bug.cgi?id=2483184
References
- https://access.redhat.com/errata/RHSA-2026:54583 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2026:54602 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2026:54770 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2026:57408 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2026:65852 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2026:70587 secalert@redhat.com
- https://access.redhat.com/security/cve/CVE-2026-42965 secalert@redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2483184 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2026:54583 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2026:54602 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2026:54770 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2026:57408 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/security/cve/CVE-2026-42965 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://bugzilla.redhat.com/show_bug.cgi?id=2483184 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42965.json 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Data sources
NVD CVE API 2.0 — fetched 2026-11-04 16:35 UTC · record ↗