CVE-2026-54099: Improper Privilege Management in Red Hat Red Hat OpenShift for Windows Containers 10.22
A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A compromised Windows worker node that holds WICD credentials can submit a CSR that is auto-approved and signed by the cluster, yielding a client certificate that grants cluster-administrator privileges and enabling full cluster takeover.
AI Analysis
Technical Summary
The vulnerability exists in the WMCO for Red Hat OpenShift Container Platform where the WICD CSR auto-approver incorrectly validates CSRs. It checks for the presence of the organization system:wicd-nodes but does not reject extra organization values like system:masters. A malicious Windows worker node with valid WICD credentials can exploit this by submitting a CSR that is automatically approved and signed by the cluster. The resulting client certificate grants cluster-admin privileges, allowing an attacker to fully compromise the cluster. This is an improper privilege management issue classified under CWE-269.
Potential Impact
Successful exploitation grants an attacker cluster-administrator privileges via a forged client certificate, enabling full control over the OpenShift cluster. This includes the ability to modify cluster configuration, deploy or delete workloads, and access sensitive data. The CVSS v3.1 score is 8.8 (High), reflecting the critical confidentiality, integrity, and availability impacts with low attack complexity and no user interaction required.
Mitigation Recommendations
The vendor advisory indicates that Red Hat OpenShift for Windows Containers 10.22.1 is available, which addresses this issue. Users should upgrade to version 10.22.1 or later to remediate the vulnerability. The advisory references Windows Machine Config Operator upgrade documentation for guidance. No other temporary mitigations or workarounds are specified. Patch status is confirmed by the vendor advisory.
CVE-2026-54099: Improper Privilege Management in Red Hat Red Hat OpenShift for Windows Containers 10.22
Description
A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A compromised Windows worker node that holds WICD credentials can submit a CSR that is auto-approved and signed by the cluster, yielding a client certificate that grants cluster-administrator privileges and enabling full cluster takeover.
CVSS v3.1
Score 8.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability exists in the WMCO for Red Hat OpenShift Container Platform where the WICD CSR auto-approver incorrectly validates CSRs. It checks for the presence of the organization system:wicd-nodes but does not reject extra organization values like system:masters. A malicious Windows worker node with valid WICD credentials can exploit this by submitting a CSR that is automatically approved and signed by the cluster. The resulting client certificate grants cluster-admin privileges, allowing an attacker to fully compromise the cluster. This is an improper privilege management issue classified under CWE-269.
Potential Impact
Successful exploitation grants an attacker cluster-administrator privileges via a forged client certificate, enabling full control over the OpenShift cluster. This includes the ability to modify cluster configuration, deploy or delete workloads, and access sensitive data. The CVSS v3.1 score is 8.8 (High), reflecting the critical confidentiality, integrity, and availability impacts with low attack complexity and no user interaction required.
Mitigation Recommendations
The vendor advisory indicates that Red Hat OpenShift for Windows Containers 10.22.1 is available, which addresses this issue. Users should upgrade to version 10.22.1 or later to remediate the vulnerability. The advisory references Windows Machine Config Operator upgrade documentation for guidance. No other temporary mitigations or workarounds are specified. Patch status is confirmed by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-06-11T19:02:42.736Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-54099","vendor":"Red Hat"}]
Threat ID: 6a393e8aeed863c81ee5cd69
Added to database: 06/22/2026, 13:54:18 UTC
Last enriched: 07/29/2026, 21:33:40 UTC
Last updated: 08/05/2026, 12:41:16 UTC
Views: 66
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.