CVE-2026-15584

A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2026-15584
https://bugzilla.redhat.com/show_bug.cgi?id=2499647

Configurations

No configuration.

History

24 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de escalada de privilegios fue encontrada en la herramienta incluster-checks para OpenShift. La herramienta crea pods de depuración privilegiados con acceso al sistema de archivos del host en el espacio de nombres predeterminado compartido, donde cualquier usuario con el rol de edición estándar puede ejecutar comandos en ellos y obtener acceso de root en los nodos del clúster.

Information

Published : 2026-07-13 13:16

Updated : 2026-10-24 22:10

NVD link : CVE-2026-15584

Mitre link : CVE-2026-15584

CVE.ORG link : CVE-2026-15584

JSON object : View

Products Affected

No product.

CWE

CWE-250

Execution with Unnecessary Privileges

{"id": "CVE-2026-15584", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15584", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-14T14:19:03.848939Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/a:redhat:pdrive_lightspeed:1"], "vendor": "Red Hat", "product": "Pen Drive Powered by Red Hat Lightspeed", "packageName": "pen-drive/pen-drive-scanner-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-07-13T13:16:30.560", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-15584", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499647", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-250"}]}], "descriptions": [{"lang": "en", "value": "A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes."}, {"lang": "es", "value": "Una vulnerabilidad de escalada de privilegios fue encontrada en la herramienta incluster-checks para OpenShift. La herramienta crea pods de depuraci\u00f3n privilegiados con acceso al sistema de archivos del host en el espacio de nombres predeterminado compartido, donde cualquier usuario con el rol de edici\u00f3n est\u00e1ndar puede ejecutar comandos en ellos y obtener acceso de root en los nodos del cl\u00faster."}], "lastModified": "2026-10-24T22:10:00.210", "sourceIdentifier": "secalert@redhat.com"}