Skip to content
Threat Feed
Subscribe

Tag

Header-Smuggling

1 brief RSS
high advisory

CVE-2026-49332: OpenShift OAuth Proxy Header Smuggling Vulnerability

A flaw in Red Hat OpenShift's oauth-proxy, tracked as CVE-2026-49332, allows an authenticated low-privilege user to smuggle a forged identity header by exploiting differences in how dash and underscore variants of 'X-Forwarded-User' are handled, potentially leading to privilege escalation in upstream applications.

Red Hat OpenShift Container Platform 4 +1 cloud vulnerability privilege-escalation header-smuggling openshift red-hat cve
1t 1c