The vulnerability in the incluster-checks tool for OpenShift allows users with the standard edit role to execute commands inside privileged debug pods that have host filesystem access. These pods are created in the shared default namespace and provide root access on cluster nodes, resulting in privilege escalation. The vulnerability affects Red Hat Pen Drive Powered by Red Hat Lightspeed. No specific affected versions or patch information is provided in the available data. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

An attacker with standard edit role permissions in the OpenShift cluster can escalate privileges to root on cluster nodes by executing commands inside privileged debug pods. This compromises the confidentiality, integrity, and availability of the cluster nodes, potentially allowing full control over the affected systems.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-15584 for current remediation guidance. Until an official fix is available, restrict edit role permissions and limit access to the shared default namespace to trusted users only to reduce the risk of exploitation.