The vulnerability CVE-2026-50237 involves a Server-Side Request Forgery (SSRF) and supply chain flaw in the OpenShift Console Helm catalog proxy. A tenant within a namespace can create a ProjectHelmChartRepository resource with an arbitrary URL, which the console pod fetches server-side, circumventing tenant egress network restrictions. This SSRF can be exploited in conjunction with catalog metadata poisoning and administrative chart installation processes to escalate privileges within the OpenShift environment. The vulnerability has a CVSS v3.1 score of 7.4 (High) with vector AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L, indicating network attack vector, low attack complexity, requiring low privileges, no user interaction, scope change, and impacts on confidentiality, integrity, and availability. Red Hat has issued official security advisories and released patched container images for OpenShift Container Platform versions 4.20.34 and 4.21.29 to remediate this vulnerability.

This vulnerability allows a namespace tenant to bypass egress restrictions by causing the OpenShift console pod to fetch arbitrary URLs server-side. This can be combined with catalog metadata poisoning and administrative chart installation to escalate privileges, potentially compromising confidentiality, integrity, and availability of the OpenShift environment. The impact is rated high severity with a CVSS score of 7.4.

Red Hat has released official security updates addressing this vulnerability in OpenShift Container Platform versions 4.20.34 and 4.21.29. Users are strongly advised to upgrade to these versions or later to fully mitigate the issue. Instructions for upgrading clusters are available in the Red Hat OpenShift documentation. No alternative mitigations are indicated in the vendor advisories.