CVE-2026-86330

An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...

CVE-2026-86330

An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...

CVE-2026-86330 Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal

An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...

CVE-2026-86330

An OS command injection flaw exists in the set_hostname_internal function of NooBaa's cluster_internal_api , a component used for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation . The root cause is the direct passing of the hostname parameter to a shell command without proper...

EUVD-2026-88236

An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...

CVE-2026-86330 Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal

An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...

CVE-2026-86330: Improper Neutralization of Special Elements used in an OS Command

An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...

PT-2026-99869

Name of the Vulnerable Software and Affected Versions NooBaa affected versions not specified Description An OS command injection flaw exists in the set hostname internal function of the 'cluster internal api' component, which manages the Multi-Cloud Object Gateway in OpenShift Data Foundation. Th...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-10056: Backport to odf-4.22.z IBMSupportCapturing the db dump is failing in ODF 4.19 DFBUGS-9935: ODF 4.22....

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-8962: RHODF 4.20.17 release DFBUGS-8003: GSS Rook Ceph metrics are not being scraped, and the...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9563: Backport to odf-4.21.10 Race condition may allow multiple CephCluster reconciles in parallel...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9558: MDR: Post-upgrade 4.21 to 4.22 DRPolicy validation failure in Metro DR DFBUGS-9404: Backport to...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.27 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.18.27 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18.27 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7383: Backport to odf-4.18.z GSS PDB is created for rgw even though the gateway instance count is 1...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7382: Backport to odf-4.19.z GSS PDB is created for rgw even though the gateway instance count is 1...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7342: RHODF 4.19.20 release DFBUGS-7332: Backport for 4.19 - GSSODFMCG noobaa-db-pg-cluster won't...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7343: RHODF 4.18.25 release DFBUGS-7010: GSS kube-rbac-proxy in OCS metrics exporter logging full bearer...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7340: RHODF 4.20.15 release DFBUGS-7331: Backport for 4.20 - GSSODFMCG noobaa-db-pg-cluster won't...