---
id: "CVE-2026-19706"
page: "https://infrastack.ai/live/CVE-2026-19706"
kind: "vulnerability"
aliases: ["CVE-2026-19706"]
title: "OpenShift ABI bootstrap signs any certificate request, granting cluster-admin access"
severity: "high"
cvss: 8.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "kubernetes", "openshift", "self-hosted"]
not_affected_if: ["install-network-isolated", "non-abi-install", "post-bootstrap-clusters", "trusted-install-network"]
published_at: "2026-11-09T18:17:27+00:00"
first_seen_at: "2026-11-09T18:27:56+00:00"
updated_at: "2026-11-09T18:30:21+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19706", "first_seen_at": "2026-11-09T18:27:56+00:00"}, {"source": "analyst", "url": "https://access.redhat.com/security/cve/CVE-2026-19706", "first_seen_at": "2026-11-09T18:30:21+00:00", "cites": ["https://access.redhat.com/security/cve/CVE-2026-19706", "https://nvd.nist.gov/vuln/detail/CVE-2026-19706"]}]
exploit_sources: []
---

# OpenShift ABI bootstrap signs any certificate request, granting cluster-admin access

Link for people: https://infrastack.ai/live/CVE-2026-19706 (this .md is for agents)

During installation of an OpenShift cluster using the Agent-Based Installer, the bootstrap node's approve-csr service approves and signs every certificate signing request without checking who sent it. An attacker on the install network can fetch the unauthenticated Ignition file, extract a limited kubeconfig, request a certificate for system:admin, and receive a cluster-admin certificate.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm whether a cluster is or was installed with the Agent-Based Installer on an install network reachable by others, using the `oc version` output from the cluster.
- Check whether ports `22623` and `22624` are reachable from untrusted networks during bootstrap.

## Timeline

- 2026-11-09T18:27:56+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-19706
- 2026-11-09T18:30:21+00:00 analyst https://access.redhat.com/security/cve/CVE-2026-19706 — Red Hat CVE page read: confirms approve-csr.service unconditionally approves CSRs during ABI bootstrap, needs network adjacency to API server; lists no affected versions, fixed release, errata or mitigation. NVD page fetch returned only homepage. web-cli search unavailable (not in toolset), X not tried. Fix/versions unknown; check the Red Hat CVE page for errata.

## Documents

- [advisory] Red Hat CVE-2026-19706 https://access.redhat.com/security/cve/CVE-2026-19706
- [mentions] NVD CVE-2026-19706 https://nvd.nist.gov/vuln/detail/CVE-2026-19706

## From the sources

During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation.

An attacker on the install network can retrieve the unauthenticated Ignition file (ports 22623/22624), extract a limited kubeconfig, submit a CSR for CN=system:admin, receive the signed certificate, and gain full cluster-admin access.

Exploitable only during the narrow bootstrap window.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_