This vulnerability affects the OpenShift Router in Red Hat OpenShift Container Platform 4. A user with EndpointSlice write permissions can exploit the flaw by creating a Service with an FQDN EndpointSlice resolving to a cloud metadata endpoint. This triggers the router to proxy requests to the cloud metadata service, leading to the disclosure of instance credentials and other sensitive metadata. The issue circumvents existing IP address validation controls. The CVSS 3.1 base score is 7.7 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, scope change, and high confidentiality impact without integrity or availability impact. The vendor advisory does not currently specify a remediation or patch status.

Successful exploitation can disclose sensitive instance credentials and metadata from the cloud metadata endpoint, potentially compromising the confidentiality of the affected system. The vulnerability bypasses prior IP validation security measures, increasing risk. There is no indication of integrity or availability impact. No known exploits are reported in the wild as of the advisory date.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-42965 for current remediation guidance. Until an official fix is available, restrict EndpointSlice write access to trusted users only to reduce risk. Monitor Red Hat communications for updates on patches or mitigations.