CVE-2026-50236

Name of the Vulnerable Software and Affected Versions OpenShift Console (affected versions not specified)

Description An authenticated Server-Side Request Forgery (SSRF) flaw exists in the OpenShift Console Dev Console webhook helpers. The system fetches user-supplied target URLs server-side without proper validation. Through path neutralization, an attacker can target arbitrary endpoints and receive full response reflections from the privileged network position of the console pod. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.