CVE-2026-82976

A flaw in the image-customization-controller within OpenShift's bare metal provisioning stack allows an adjacent network attacker to access sensitive secrets. The controller hosts an unauthenticated HTTP file server on port 8084 that provides a browsable HTML directory listing. This listing discl...