The Red Hat OpenShift API for Data Protection (OADP) enables backup and restore of application resources and persistent volumes using file system-based and snapshot-based methods. Multiple vulnerabilities (including CVE-2025-47911 and 33 others) have been identified affecting OADP. Red Hat has issued an important security advisory (RHSA-2026:43692) with a new OADP version that addresses these issues. The advisory references numerous bug fixes and improvements related to resource validation, namespace handling, logging, and PVC phase conditions. No explicit CVSS scores are provided. Patch details or specific affected versions are not explicitly stated in the advisory content provided.

The vulnerabilities affect the integrity and reliability of backup and restore operations in OADP, potentially leading to failed validations, incorrect handling of persistent volume claims, and other operational issues. The severity is rated high by the source, indicating significant risk if exploited. However, no known exploits are reported in the wild at this time.

Red Hat has released a new version of OpenShift API for Data Protection that addresses these vulnerabilities. Users should apply the update after ensuring all previously released relevant errata are applied. Since this is not a cloud service, remediation requires user action to update to the fixed version. Patch status is confirmed by the vendor advisory. No additional mitigation steps are specified beyond applying the update.