This security advisory from Red Hat Product Security addresses vulnerabilities in Red Hat OpenShift Builds, specifically version 1.6.5. The vulnerabilities include issues tracked under CVE-2026-33186, CVE-2026-33211, and CVE-2026-33810, associated with CWEs such as CWE-551 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-22 (Path Traversal), and CWE-1289. The CVSS vector for CVE-2026-33186 indicates a high severity vulnerability exploitable remotely without privileges or user interaction, impacting confidentiality and integrity. The advisory recommends upgrading from version 1.6.4 to 1.6.5 to address these vulnerabilities. The vendor advisory does not provide explicit patch links but confirms the release of version 1.6.5 as the solution. There are no known exploits in the wild at the time of publication.

The vulnerabilities impact confidentiality and integrity of the affected Red Hat OpenShift Builds 1.6.x versions. The CVSS vector indicates that an attacker can exploit these vulnerabilities remotely over the network with low complexity and no privileges or user interaction required. This could lead to unauthorized disclosure and modification of data within the affected system. There are no reports of active exploitation in the wild.

Red Hat recommends that users of Red Hat OpenShift Builds version 1.6.4 upgrade to version 1.6.5 to remediate the identified vulnerabilities. The vendor advisory confirms that version 1.6.5 contains the necessary fixes. No additional mitigation steps are specified or required beyond applying this update.