A path traversal vulnerability (CVE-2026-75887) was discovered in the OpenShift console allowing unauthenticated attackers to read sensitive JSON files from the pod filesystem by manipulating query parameters. This flaw affects the /locales/resource.json endpoint and can also be exploited against registered dynamic-plugin backends. Red Hat has released a security update in OpenShift Container Platform 4.20.40 to address this issue.