THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-18874 (MEDIUM 6.2) — A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML (Yet Another Markup Language) code into the OpenShift Lifecycle Manager (OLM) Subscription resource. This is due to improper escaping of annotation values when they are re

[NVD] CVE-2026-18874 (MEDIUM 6.2) — A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML (Yet Another Markup Language) code into the OpenShift Lifecycle Manager (OLM) Subscription resource. This is due to improper escaping of annotation values when they are re

mednvdPublished 2026-08-19

CVE-2026-18874 CVSS: 6.2 MEDIUM Published: 2026-08-19T18:16:36.080

A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML (Yet Another Markup Language) code into the OpenShift Lifecycle Manager (OLM) Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML. Successful exploitation could lead

Indicators of compromise

CVE-2026-18874cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18874