Skip to main content
EPSS 0.8%top 44%

Red Hat Security Advisory: OpenShift Container Platform 4.22.7 bug fix and security update

0
High
Published: 07/28/2026 (07/28/2026, 09:08:45 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.7. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHBA-2026:44229 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/

Affected software

Affected versions
=1.1.0>=4.20 <4.20.31>=4.21>=4.22>=2.6>=3.3Red HatRed Hat Developer HubRed Hat Developer Hub 1.9amd64registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64Red Hat OpenShift Service MeshRed Hat OpenShift Service Mesh 2.6registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:0425fb2f7d03cb753a5320b4e0c5f37cb1475ca9b73f1a2dbff26c59f1729edf_amd64Red Hat Ansible Automation PlatformRed Hat Ansible Automation Platform 2.1registry.redhat.io/ansible-automation-platform/automation-portal@sha256:a85a548cb563a32be76c6e7e015fd57d340e068e321bf34b060d9eb901c33c4d_amd64Red Hat OpenShift Container PlatformRed Hat OpenShift Container Platform 4.20registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:ed16fd4d2195b6350c7851b636d6adf0dfc03a73a98635152191bfa34164ed9b_amd64Red Hat QuayRed Hat Quay 3.15registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64Red Hat OpenShift Container Platform 4.22registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:c6447071c743d3076d4bf0d8ace87504c08288c935217938b55a31553f22e858_amd64Red Hat OpenShift Service Mesh 3.3registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0dbf34fe3dfa3ad05d3b4f0b31c6df5af681b6861dce5f1d5afda55172d624ef_amd641.1.0Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:8635aa1c135bffc7498b76f49138efa4c0d60ca0fdb1215f2657dc2d61c83d6c_amd64Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:b8ebed9ce8e30fc517241acb9ea189721a4501ad0bfc34026e5b616f5c2450b7_amd64registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:cb44186b6142c36dc16fe10379af6ab3e92b899aa48183bb8b43c8e7426f692f_amd64Red Hat OpenShift Container Platform 4.2

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/17/2026, 21:33:55 UTC

Technical Analysis

CVE-2026-9277 is a command injection vulnerability in the shell-quote component used by Kiali 1.73.32 within Red Hat OpenShift Service Mesh 2.6. The vulnerability arises from unescaped line terminators that enable arbitrary code execution via command injection. Red Hat has released updated container images and packages for OpenShift Container Platform 4.20.31 and related products to address this issue. The advisory includes instructions for upgrading clusters and applying asynchronous errata updates. The vulnerability is rated as high severity by Red Hat Product Security. No known exploits in the wild have been reported.

Potential Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on affected systems running Kiali 1.73.32 in Red Hat OpenShift Service Mesh 2.6. This could lead to compromise of the service mesh observability component and potentially impact the security and stability of the OpenShift environment. The vulnerability is rated as high severity, indicating significant risk if left unpatched.

Mitigation Recommendations

Red Hat has released fixed container images and packages for OpenShift Container Platform 4.20.31 and related products that address this vulnerability. Users should upgrade to these updated versions as soon as they are available in their release channels. Detailed upgrade instructions are provided in the Red Hat advisory and official OpenShift documentation. No alternative mitigations are specified, so applying the official update is the recommended remediation.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:26072
Cve Count
1
State
PUBLISHED

Threat ID: 6a3088160b89be6888b7520d

Added to database: 06/15/2026, 23:17:42 UTC

Last enriched: 08/17/2026, 21:33:55 UTC

Last updated: 09/14/2026, 12:32:37 UTC

Views: 208

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

External Links

NVD DatabaseMITRE CVEhttps://access.redhat.com/errata/RHSA-2026:44263https://access.redhat.com/security/cve/CVE-2026-12143https://access.redhat.com/security/cve/CVE-2026-40895https://access.redhat.com/security/cve/CVE-2026-42154https://access.redhat.com/security/cve/CVE-2026-42338https://access.redhat.com/security/cve/CVE-2026-45736https://access.redhat.com/security/cve/CVE-2026-59869https://access.redhat.com/security/cve/CVE-2026-59873https://access.redhat.com/security/cve/CVE-2026-9277https://access.redhat.com/security/updates/classification/Canonical URLhttps://access.redhat.com/errata/RHSA-2026:44267https://access.redhat.com/security/cve/CVE-2026-34986https://access.redhat.com/security/cve/CVE-2026-35469Canonical URLReference 16Reference 17Reference 18Reference 19Reference 20Reference 21Reference 22Reference 23Reference 24Reference 25Reference 26Reference 27Reference 28Reference 29Reference 30Reference 31Reference 32Reference 33Reference 34Reference 35Reference 36Reference 37Reference 38Reference 39Reference 40Reference 41Reference 42Reference 43Reference 44Reference 45https://access.redhat.com/security/updates/classificationCanonical URLhttps://access.redhat.com/security/cve/CVE-2026-10143https://access.redhat.com/security/cve/CVE-2026-32591https://access.redhat.com/security/cve/CVE-2026-39820https://access.redhat.com/security/cve/CVE-2026-39821https://access.redhat.com/security/cve/CVE-2026-39828https://access.redhat.com/security/cve/CVE-2026-39829https://access.redhat.com/security/cve/CVE-2026-39830https://access.redhat.com/security/cve/CVE-2026-39831https://access.redhat.com/security/cve/CVE-2026-39832https://access.redhat.com/security/cve/CVE-2026-39835https://access.redhat.com/security/cve/CVE-2026-42151https://access.redhat.com/security/cve/CVE-2026-42499https://access.redhat.com/security/cve/CVE-2026-42508https://access.redhat.com/security/cve/CVE-2026-44432https://access.redhat.com/security/cve/CVE-2026-44486https://access.redhat.com/security/cve/CVE-2026-44487https://access.redhat.com/security/cve/CVE-2026-44488https://access.redhat.com/security/cve/CVE-2026-32281https://access.redhat.com/security/cve/CVE-2026-44293Canonical URLhttps://access.redhat.com/security/cve/CVE-2026-27136Canonical URLhttps://access.redhat.com/security/cve/CVE-2026-27145https://access.redhat.com/security/cve/CVE-2026-33811https://access.redhat.com/security/cve/CVE-2026-42033https://access.redhat.com/security/cve/CVE-2026-42035https://access.redhat.com/security/cve/CVE-2026-42039https://access.redhat.com/security/cve/CVE-2026-42041https://access.redhat.com/security/cve/CVE-2026-42043https://access.redhat.com/security/cve/CVE-2026-42044https://access.redhat.com/security/cve/CVE-2026-44492https://access.redhat.com/security/cve/CVE-2026-44494https://access.redhat.com/security/cve/CVE-2026-44495https://access.redhat.com/security/cve/CVE-2026-44496https://access.redhat.com/security/cve/CVE-2026-44724Canonical URLhttps://access.redhat.com/security/cve/CVE-2026-13676Canonical URLhttps://access.redhat.com/errata/RHSA-2026:50850https://access.redhat.com/security/cve/CVE-2026-43997https://access.redhat.com/security/cve/CVE-2026-43998https://access.redhat.com/security/cve/CVE-2026-43999https://access.redhat.com/security/cve/CVE-2026-44000https://access.redhat.com/security/cve/CVE-2026-44001https://access.redhat.com/security/cve/CVE-2026-44002https://access.redhat.com/security/cve/CVE-2026-44003https://access.redhat.com/security/cve/CVE-2026-44004https://access.redhat.com/security/cve/CVE-2026-44005https://access.redhat.com/security/cve/CVE-2026-44006https://access.redhat.com/security/cve/CVE-2026-44007https://access.redhat.com/security/cve/CVE-2026-44008https://access.redhat.com/security/cve/CVE-2026-44009https://access.redhat.com/security/cve/CVE-2026-45411https://access.redhat.com/security/cve/CVE-2026-47131https://access.redhat.com/security/cve/CVE-2026-47135https://access.redhat.com/security/cve/CVE-2026-47137https://access.redhat.com/security/cve/CVE-2026-47139https://access.redhat.com/security/cve/CVE-2026-47140Reference 106Reference 107Reference 108Reference 109Reference 110Search on Google

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses