CVE-2026-19706 · Infrastructure
NO FIX YET
During installation of an OpenShift cluster using the Agent-Based Installer, the bootstrap node's approve-csr service approves and signs every certificate signing request without checking who sent it. An attacker on the install network can fetch the unauthenticated Ignition file, extract a limited kubeconfig, request a certificate for system:admin, and receive a cluster-admin certificate.
first public Nov 9, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only clusters being bootstrapped with the installer's bootstrap node during the install window are described as exposed. An attacker must be on the install network while bootstrap runs. Clusters not installed during this window are described as not exposed, though the sources do not explicitly say so.
Not affected if install-network-isolated, non-abi-install, post-bootstrap-clusters, trusted-install-network
Who cares kubernetes, openshift, self-hosted
oc version output from the cluster.22623 and 22624 are reachable from untrusted networks during bootstrap.Unknown from the sources.
During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation.
An attacker on the install network can retrieve the unauthenticated Ignition file (ports 22623/22624), extract a limited kubeconfig, submit a CSR for CN=system:admin, receive the signed certificate, and gain full cluster-admin access.
Exploitable only during the narrow bootstrap window.
This page as .md · .json · CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.