CVE-2026-19706

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description During ABI bootstrap, the approve-csr.service on the bootstrap node approves and signs every Certificate Signing Request (CSR) without performing identity validation. An attacker on the installation network can retrieve the unauthenticated Ignition file via ports 22623 or 22624, extract a limited kubeconfig, and submit a CSR for CN=system:admin. This allows the attacker to receive a signed certificate and obtain full cluster-admin access. This issue is only exploitable during the narrow bootstrap window.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.