CVE-2026-75887

Name of the Vulnerable Software and Affected Versions OpenShift console (affected versions not specified)

Description An unauthenticated attacker can exploit a path traversal flaw by manipulating the lng and ns query parameters in the '/locales/resource.json' endpoint. This allows the attacker to read sensitive *.json files from the pod filesystem, such as configuration files and plugin manifests. Additionally, this issue can enable path traversal against registered dynamic-plugin backends.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.