CVE-2026-107174: OpenShift Serverless (exact versions not specified); +3 more affected products

Affected technology

OpenShift Serverless · Exact affected versions not specified by the source
Red Hat

OpenShift Source-to-Image (S2I) · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat

Red Hat Web Terminal · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

The attacker can bypass sandbox boundaries, potentially leading to unauthorized information disclosure or file modification on the host system. Vendor/CNA’s CVSS 3.1 assessment (base score 6.4/10) rates confidentiality and integrity impact as low; availability impact as none.