# Red Hat OpenShift Container Platform 4.12.

Every CVE that names Red Hat OpenShift Container Platform 4.12 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns](https://agentprime.io/advisories/CVE-2026-114406.md)
  `CVE-2026-114406` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Weak cryptography or TLS
- [Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch](https://agentprime.io/advisories/CVE-2026-75888.md)
  `CVE-2026-75888` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader](https://agentprime.io/advisories/CVE-2026-93017.md)
  `CVE-2026-93017` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Privilege escalation
- [Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect](https://agentprime.io/advisories/CVE-2026-83589.md)
  `CVE-2026-83589` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Open redirect
- [Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler](https://agentprime.io/advisories/CVE-2026-75887.md)
  `CVE-2026-75887` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint](https://agentprime.io/advisories/CVE-2026-75885.md)
  `CVE-2026-75885` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console](https://agentprime.io/advisories/CVE-2026-50237.md)
  `CVE-2026-50237` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()](https://agentprime.io/advisories/CVE-2026-15816.md)
  `CVE-2026-15816` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection
- [Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export](https://agentprime.io/advisories/CVE-2026-16313.md)
  `CVE-2026-16313` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection
- [Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams](https://agentprime.io/advisories/CVE-2026-49332.md)
  `CVE-2026-49332` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-436
- [Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module](https://agentprime.io/advisories/CVE-2026-16445.md)
  `CVE-2026-16445` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env](https://agentprime.io/advisories/CVE-2026-15809.md)
  `CVE-2026-15809` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption, CWE-116
- [Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass](https://agentprime.io/advisories/CVE-2026-14476.md)
  `CVE-2026-14476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 7 Jul 2026 · Tags: Path traversal
- [Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation](https://agentprime.io/advisories/CVE-2026-14474.md)
  `CVE-2026-14474` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-1188
- [Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive](https://agentprime.io/advisories/CVE-2026-58015.md)
  `CVE-2026-58015` · CVE record: GNOME GLib and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Path traversal
- [Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"](https://agentprime.io/advisories/CVE-2026-58014.md)
  `CVE-2026-58014` · CVE record: GNOME GLib and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-193
- [Dracut: dracut: root code execution via dhcp options command injection](https://agentprime.io/advisories/CVE-2026-6893.md)
  `CVE-2026-6893` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection
- [Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection](https://agentprime.io/advisories/CVE-2026-1784.md)
  `CVE-2026-1784` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-15
- [Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend](https://agentprime.io/advisories/CVE-2026-46579.md)
  `CVE-2026-46579` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.4 High · Not analysed yet · Published 29 May 2026 · Tags: Authentication bypass
- [Samba: remote code execution in samr](https://agentprime.io/advisories/CVE-2026-4408.md)
  `CVE-2026-4408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 May 2026 · Tags: Command injection
- [Samba: missing access check on reparse point operations](https://agentprime.io/advisories/CVE-2026-1933.md)
  `CVE-2026-1933` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Broken access control
- [Samba: vfs_worm does not block directory modification](https://agentprime.io/advisories/CVE-2026-2340.md)
  `CVE-2026-2340` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: CWE-280
- [Samba: group policy certificate enrollment uses http\:// without validation](https://agentprime.io/advisories/CVE-2026-3012.md)
  `CVE-2026-3012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-345
- [Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name](https://agentprime.io/advisories/CVE-2026-42013.md)
  `CVE-2026-42013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS
- [Gnutls: gnutls: information disclosure via heap overread in rsa key exchange](https://agentprime.io/advisories/CVE-2026-5260.md)
  `CVE-2026-5260` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-126
- [Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data](https://agentprime.io/advisories/CVE-2026-48864.md)
  `CVE-2026-48864` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 May 2026 · Tags: Memory corruption
- [Gnutls: gnutls: denial of service via dtls packet reordering vulnerability](https://agentprime.io/advisories/CVE-2026-42009.md)
  `CVE-2026-42009` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-475
- [Gnutls: gnutls: security bypass due to incorrect name constraint handling](https://agentprime.io/advisories/CVE-2026-42011.md)
  `CVE-2026-42011` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [Gnutls: gnutls: authentication bypass via nul character in username](https://agentprime.io/advisories/CVE-2026-42010.md)
  `CVE-2026-42010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 7 May 2026 · Tags: CWE-170, CWE-626
- [Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly](https://agentprime.io/advisories/CVE-2026-33846.md)
  `CVE-2026-33846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 May 2026 · Tags: CWE-130
- [Gnutls: gnutls: denial of service via dtls zero-length fragment](https://agentprime.io/advisories/CVE-2026-33845.md)
  `CVE-2026-33845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Apr 2026 · Tags: Memory corruption
- [Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison](https://agentprime.io/advisories/CVE-2026-3833.md)
  `CVE-2026-3833` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-178
- [Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()](https://agentprime.io/advisories/CVE-2026-4878.md)
  `CVE-2026-4878` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Race condition
- [Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing](https://agentprime.io/advisories/CVE-2026-5121.md)
  `CVE-2026-5121` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption
- [Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing](https://agentprime.io/advisories/CVE-2026-4424.md)
  `CVE-2026-4424` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Glib: integer overflow in in g_escape_uri_string()](https://agentprime.io/advisories/CVE-2025-13601.md)
  `CVE-2025-13601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.7 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption
- [Grub2: missing unregister call for gettext command may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61662.md)
  `CVE-2025-61662` · CVE record: GNU grub2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption
- [Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems](https://agentprime.io/advisories/CVE-2025-11561.md)
  `CVE-2025-11561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Privilege escalation
- [Qemu-kvm: vnc websocket handshake use-after-free](https://agentprime.io/advisories/CVE-2025-11234.md)
  `CVE-2025-11234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr](https://agentprime.io/advisories/CVE-2025-7425.md)
  `CVE-2025-7425` · CVE record: GNOME libxml2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption
- [Libssh: out-of-bounds read in sftp_handle()](https://agentprime.io/advisories/CVE-2025-5318.md)
  `CVE-2025-5318` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: Memory corruption
- [Libxml: heap use after free (uaf) leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49794.md)
  `CVE-2025-49794` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption
- [Libxml: type confusion leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49796.md)
  `CVE-2025-49796` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption
- [Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2](https://agentprime.io/advisories/CVE-2025-6021.md)
  `CVE-2025-6021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2025 · Tags: Memory corruption
- [Grub2: net: out-of-bounds write in grub_net_search_config_file()](https://agentprime.io/advisories/CVE-2025-0624.md)
  `CVE-2025-0624` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.6 High · Not analysed yet · Published 19 Feb 2025 · Tags: Memory corruption
- [Rsync: info leak via uninitialized stack contents](https://agentprime.io/advisories/CVE-2024-12085.md)
  `CVE-2024-12085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials](https://agentprime.io/advisories/CVE-2024-45497.md)
  `CVE-2024-45497` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.6 High · Not analysed yet · Published 31 Dec 2024 · Tags: Broken access control
- [Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)](https://agentprime.io/advisories/CVE-2024-9676.md)
  `CVE-2024-9676` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: Path traversal
- [Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)](https://agentprime.io/advisories/CVE-2023-6596.md)
  `CVE-2023-6596` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.11 and 2 more · CVSS 7.5 High · Not analysed yet · Published 25 Apr 2024 · Tags: Denial of service
- [Openshift: modification of node role labels](https://agentprime.io/advisories/CVE-2023-5408.md)
  `CVE-2023-5408` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.11 and 3 more · CVSS 7.2 High · Not analysed yet · Published 2 Nov 2023 · Tags: Privilege escalation
- [Cri-o: security regression of cve-2022-27652](https://agentprime.io/advisories/CVE-2022-3466.md)
  `CVE-2022-3466` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2023 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-openshift-container-platform-4-12>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-openshift-container-platform-4-12/>. Everything for agents: <https://agentprime.io/llms.txt>.