CVE-2026-50237

Summary

A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata poisoning and admin-mediated chart installation, this enables privilege escalation.

Affected Software

VendorProductVersion RangeStatus
Red HatRed Hat OpenShift Container Platform 4.121786511587 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.131786477760 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.141787056403 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.151787028559 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.161787054159 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.171787631382 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.181786540776 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.191786486822 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.201786534931 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.211786574043 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.221786607915 < *unaffected

Weaknesses

  • CWE-918: Server-Side Request Forgery (SSRF)

Workarounds

Review existing ProjectHelmChartRepository resources in tenant namespaces for unexpected URLs using: oc get projecthelmchartrepositories –all-namespaces -o jsonpath='{range .items[*]}{.metadata.namespace}/{.metadata.name}: {.spec.connectionConfig.url}{"\n"}{end}'. Apply NetworkPolicy egress restrictions to the openshift-console namespace (note: requires allow-listing required console egress targets). Administrators should verify chart provenance before installing Helm charts from namespace-scoped repositories. Disable or restrict ProjectHelmChartRepository creation via RBAC if namespace tenants do not require custom Helm repositories.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References