THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-50237 (HIGH 7.4) — A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with

[NVD] CVE-2026-50237 (HIGH 7.4) — A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with

mednvdPublished 2026-08-11

CVE-2026-50237 CVSS: 7.4 HIGH Published: 2026-08-11T12:17:38.347

A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata poisoning and admin-mediated chart i

Indicators of compromise

CVE-2026-50237cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-50237