Cpe:2.3:a:red_hat:openshift_ansible:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ared_hatopenshift_ansible/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 01:09:54 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRed Hat openshift-ansible: Arbitrary code execution via unverified remote scripts (CVE-2026-92092)https://feed.craftedsignal.io/briefs/2026-10-openshift-ansible-rce/Fri, 30 Oct 2026 01:09:54 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-openshift-ansible-rce/The openshift-ansible installer container fetches and executes remote scripts without integrity verification, allowing arbitrary code execution via Man-in-the-Middle (MITM) or server compromise.A security flaw exists in the run script of the openshift-ansible installer container. The script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle (MITM) attack or compromising the HTTP server providing these scripts, could substitute an arbitrary executable. This executable would run with the installer's user ID and full cluster-provisioning privileges, leading to arbitrary code execution.

]]>highadvisory