Red Hat OpenShift Container Platform 4.21.16 provides bug fixes and security updates, including a security fix for CVE-2026-22029 and nine additional CVEs. The platform is a Kubernetes application platform for on-premise or private cloud deployments. The update includes container image updates and RPM package fixes documented in separate advisories. The security impact is rated as Important by Red Hat Product Security. The CVE-2026-22029 vulnerability has a CVSS 3.1 vector indicating network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality and integrity but no impact on availability. The advisory instructs users to upgrade their clusters using official OpenShift documentation and tools.

The vulnerabilities addressed, including CVE-2026-22029, have a high impact on confidentiality and integrity of the OpenShift Container Platform environment, potentially allowing unauthorized information disclosure or modification. The CVSS vector for CVE-2026-22029 indicates that exploitation requires user interaction and has high attack complexity, but no privileges are required. The overall security impact is rated Important by Red Hat. There are no known exploits in the wild at the time of this advisory.

Red Hat has released OpenShift Container Platform 4.21.16 with updated container images and RPM packages that fix the reported vulnerabilities. Users should upgrade their OpenShift clusters to version 4.21.16 following the official Red Hat upgrade documentation to fully apply these security fixes. The vendor manages remediation through these updates; no additional mitigation steps are specified beyond applying the update.