CVE-2026-50236 — Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console
An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutra…
Published: 2026-08-11 · CVSS: 7.4 · CVSS 3.1
An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7