Skip to content
Threat Feed

Product

OpenShift Router

2 briefs RSS
high advisory

OpenShift Router Vulnerability CVE-2026-46579: Mutual TLS Bypass via Header Injection

CVE-2026-46579 describes a vulnerability in the Red Hat OpenShift Router. When a Route is configured with `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend fails to remove `X-SSL-Client-*` headers from incoming requests, allowing unauthenticated attackers to bypass mutual TLS authentication and impersonate client certificate identities.

OpenShift Router openshift mtls header-injection cve-2026-46579
1r 2t 1c
medium advisory

OpenShift Router SSRF via FQDN EndpointSlice (CVE-2026-42965)

CVE-2026-42965 describes a server-side request forgery (SSRF) vulnerability in the OpenShift Router where a user with EndpointSlice write access can expose instance credentials by creating a service that proxies requests to a cloud metadata endpoint.

OpenShift Router ssrf cve openshift
1r 1t 1c