Red Hat OpenShift Container Platform 4.21.4 is a bug fix and security update release that addresses multiple issues including CVE-2026-22797. The platform is a Kubernetes application platform for on-premise or private cloud environments. The advisory provides updated container images and references RPM package updates in a related errata. The security update is rated as important by Red Hat Product Security. Users should upgrade their clusters following the official upgrade procedures to apply these fixes. The CVE is associated with CWE-290 (Authentication Bypass by Spoofing) and has a high CVSS vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L) indicating network attack vector, low attack complexity, and significant confidentiality, integrity, and availability impacts.

The vulnerability CVE-2026-22797 affects Red Hat OpenShift Container Platform 4.21 and could allow an attacker with low privileges to perform actions leading to high confidentiality and integrity impact, and low availability impact. The update fixes this and other bugs, improving platform security and stability. Exploits in the wild are not known at this time.

Red Hat has released OpenShift Container Platform 4.21.4 containing fixes for CVE-2026-22797 and other issues. Users should upgrade to this version using the official upgrade documentation to fully apply the security update. No additional mitigations are specified beyond applying the update. Patch status is confirmed by the vendor advisory.