{"id":"CVE-2026-115424","kind":"vulnerability","aliases":["CVE-2026-115424"],"related":[],"title":"OpenShift oc: malicious image layers can write files outside extraction directory","description":"A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a malicious container image can exploit this vulnerability by embedding links, and a chained file entry, that reference locations outside the intended extraction directory. This allows the attacker to write attacker-controlled content to arbitrary locations on the host filesystem with the privileges of the user running the command, potentially leading to file modification outside the destination directory.","summary":"The OpenShift client oc does not sanitize symlink and hardlink targets when running oc image extract, so a crafted container image can place links pointing to absolute paths or sibling directories. An attacker can then write attacker-controlled content to arbitrary host locations with the privileges of the user running the command.","severity":"medium","cvss":5.5,"epss":0.00164,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ci-cd","containers","infrastructure","oc-cli","openshift"],"not_affected_if":["no-image-extract-usage","trusted-images-only"],"how_to_check":"- Run `oc version --client` to find the installed client version and compare it against the fixed release listed in the NVD or vendor entry\n- Check whether any scripts or pipelines run `oc image extract` against images from untrusted registries","fix":"- Upgrade the oc client to a release that includes the fix for CVE-2026-115424 (fixed version: unknown)\n- Until upgraded, only run `oc image extract` on images from trusted sources, into a dedicated empty directory","status":"open","published_at":"2026-10-22T22:18:06+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T04:10:42+00:00","updated_at":"2026-10-25T04:10:42+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T04:10:42Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade the oc client to a release that includes the fix for CVE-2026-115424 (fixed version: unknown)\n- Until upgraded, only run `oc image extract` on images from trusted sources, into a dedicated empty directory","reach":"local","title":"OpenShift oc: malicious image layers can write files outside extraction directory","impact":"high","summary":"The OpenShift client oc does not sanitize symlink and hardlink targets when running oc image extract, so a crafted container image can place links pointing to absolute paths or sibling directories. An attacker can then write attacker-controlled content to arbitrary host locations with the privileges of the user running the command.","category":"infrastructure","nicknames":[],"who_cares":["openshift","oc-cli","containers","ci-cd"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker writes arbitrary files on host as the running user","analyst_note":"Find the affected and fixed oc versions in the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-115424) and the Red Hat advisory; sources do not give version ranges.","how_to_check":"- Run `oc version --client` to find the installed client version and compare it against the fixed release listed in the NVD or vendor entry\n- Check whether any scripts or pipelines run `oc image extract` against images from untrusted registries","needs_analyst":true,"not_affected_if":["no-image-extract-usage","trusted-images-only"],"who_is_affected":"Anyone who runs the oc client's image extract command on container images they did not build themselves, such as CI jobs, mirroring scripts or developer workstations pulling third-party images. Teams that only use oc for cluster administration without extracting images from outside sources are less exposed. The sources do not name the affected oc versions.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.00067,"input_tokens":3428,"output_tokens":655,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115424':14A,17A '-2026':13A,16A 'absolut':53B,111C 'allow':150C 'applic':99C 'arbitrari':68B,160C 'attack':59B,64B,122C,152C,156C 'attacker-control':63B,155C 'cd':20B 'chain':138C 'ci':19B 'ci-cd':18B 'cli':25B 'client':29B,87C 'command':79B,174C 'contain':21B,46B,91C,127C 'content':66B,158C 'control':65B,157C 'craft':45B 'cve':12A,15A 'destin':120C,182C 'directori':11A,57B,116C,148C,183C 'embed':134C 'entri':140C 'exploit':130C 'extract':10A,42B,90C,97C,119C,147C 'fail':100C 'file':8A,139C,178C 'filesystem':165C 'flaw':81C 'found':83C 'hard':106C 'hardlink':36B 'host':69B,164C 'imag':4A,41B,47B,92C,96C,128C 'infrastructur':22B 'intend':146C 'layer':5A,93C 'lead':176C 'link':50B,107C,135C 'locat':70B,143C,161C 'malici':3A,126C 'modif':179C 'oc':2A,24B,30B,40B,88C,95C 'oc-c':23B 'openshift':1A,26B,28B,86C 'outsid':9A,144C,180C 'path':54B,112C 'place':49B 'point':51B,109C 'potenti':175C 'privileg':73B,168C 'proper':102C 'refer':142C 'run':39B,77B,172C 'sanit':33B,103C 'sibl':56B,115C 'suppli':124C 'symbol':104C 'symlink':34B 'target':37B,108C 'user':76B,171C 'vulner':132C 'write':7A,62B,154C","nicknames":[],"mitigations":[],"who_affected":"Anyone who runs the oc client's image extract command on container images they did not build themselves, such as CI jobs, mirroring scripts or developer workstations pulling third-party images. Teams that only use oc for cluster administration without extracting images from outside sources are less exposed. The sources do not name the affected oc versions.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T22:18:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115424","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115424","severity":null,"published_at":"2026-10-22T22:18:06+00:00","modified_at":"2026-10-23T16:44:17+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115424","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115424","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}