CVE-2026-42965 is an SSRF vulnerability in the OpenShift Router of Red Hat OpenShift Container Platform 4. A user with EndpointSlice write permissions can exploit this by creating a Service with an FQDN EndpointSlice that resolves to a cloud metadata endpoint. The router then proxies requests to this endpoint, leading to disclosure of instance credentials and sensitive metadata. This vulnerability circumvents existing IP validation controls designed to prevent such access. The CVSS 3.1 base score is 7.7, reflecting high severity with network attack vector, low attack complexity, and requiring privileges but no user interaction. No official patch or remediation level is currently stated in the vendor advisory.

Successful exploitation allows an attacker with EndpointSlice write access to retrieve sensitive cloud instance metadata and credentials via the OpenShift Router. This can lead to credential disclosure and potential further compromise of cloud resources. The vulnerability bypasses existing IP validation protections, increasing the risk of unauthorized access to sensitive information. There is no indication of impact on data integrity or availability.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-42965 for current remediation guidance. Until a fix is available, restrict EndpointSlice write permissions to trusted users only to reduce the risk of exploitation. Monitor official Red Hat communications for updates on patches or workarounds.