This vulnerability, identified as CVE-2026-41240, affects Red Hat OpenShift Virtualization v4.14 images. OpenShift Virtualization is a Red Hat product designed to provide virtualization capabilities within the OpenShift Container Platform. The Red Hat security advisory RHSA-2026:27944 mentions updated v4.14 images that include fixes for this and other issues. The advisory does not detail the exact nature of the vulnerability beyond referencing CWE identifiers (CWE-79, CWE-915, CWE-289), which relate to cross-site scripting, improper control of resource identifiers, and authentication issues respectively. No CVSS score is provided, and no known exploits have been reported. The vendor recommends applying the updated images as the solution.

The vulnerability potentially affects the security of Red Hat OpenShift Virtualization v4.14 images, which could impact the confidentiality, integrity, or availability of the virtualization environment. The exact impact is not detailed in the advisory. The severity is rated medium by the vendor. No known active exploitation has been reported.

Red Hat recommends updating to the latest OpenShift Virtualization v4.14 images as provided in the advisory RHSA-2026:27944. Before applying this update, ensure all previously released relevant errata have been applied. No additional mitigation steps are specified. Patch status is implied by the availability of updated images; therefore, applying these updates addresses the vulnerability.