CVE-2026-75885

A flaw was found in the OpenShift console. Unauthenticated access to the "/api/devfile/" and "/api/devfile/samples/" endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery SSRF, where the console pod makes requests to internal services an...

PT-2026-95717

Name of the Vulnerable Software and Affected Versions OpenShift console affected versions not specified Description Unauthenticated access to the /api/devfile/ and /api/devfile/samples/ endpoints allows a remote attacker to send crafted devfile payloads. This can result in Server-Side Request...

CVE-2026-75885: Server-Side Request Forgery (SSRF)

A flaw was found in the OpenShift console. Unauthenticated access to the /api/devfile/ and /api/devfile/samples/ endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery SSRF, where the console pod makes requests to internal services and...