{"id":"CVE-2026-82976","kind":"vulnerability","aliases":["CVE-2026-82976"],"related":[],"title":"OpenShift bare metal provisioning: unauthenticated image server leaks cluster pull secret","description":"A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. The controller registers an HTTP file server on port 8084 with no authentication. The custom imageFileSystem implementation exposes a browsable HTML directory listing of all registered images at the root path. The only access control on per-host images is the random UUID filename; the directory listing discloses those UUIDs to any caller on the provisioning network. Each served image embeds an Ignition config containing the base64-encoded cluster pull secret, optional IRONIC_RAMDISK_SSH_KEY, proxy settings, and per-host NetworkManager keyfiles. An adjacent network attacker can enumerate all image UUIDs via directory listing, download any image, extract the embedded Ignition config, and recover the cluster pull secret and SSH key.\n\n### Evidence\n**pkg/imagehandler/imagefilesystem.go — root directory is browsable and enumerates all UUID image names**\n```go\nfunc (f *imageFileSystem) Readdir(n int) ([]fs.FileInfo, error) {\n    f.mu.Lock()\n    defer f.mu.Unlock()\n    result := []fs.FileInfo{}\n    for _, im := range f.images {\n        result = append(result, im)\n    }\n    return result, nil\n}\n\nfunc (f *imageFileSystem) Open(name string) (http.File, error) {\n    f.log.Info(\"Open\", \"path\", name)\n    if name == \"/\" {\n        return f, nil\n    }\n    ...\n```\n\n**cmd/controller/main.go — file server bound on all interfaces without auth or TLS**\n```go\nhttp.Handle(\"/\", http.FileServer(imageServer.FileSystem()))\n\ngo func() {\n    server := &http.Server{\n        Addr:              imagesBindAddr,   // default \":8084\"\n        ReadHeaderTimeout: 5 * time.Second,\n    }\n    err := server.ListenAndServe()\n```\n\n**pkg/ignition/service_config.go:94-100 — pull secret is embedded in every served image**\n```go\nfunc (b *ignitionBuilder) authFile() ignition_config_types_32.File {\n    source := \"data:;base64,\" + strings.TrimSpace(b.ironicAgentPullSecret)\n    return ignition_config_types_32.File{\n        Node: ignition_config_types_32.Node{Path: \"/etc/authfile.json\"},\n        ...\n```\n\n### Attack Pattern\nAdjacent provisioning-network client → GET / lists UUID image names → download ISO/initramfs → extract embedded Ignition → recover cluster pull secret and SSH key.","summary":"The image-customization-controller in OpenShift's bare metal provisioning stack serves an unauthenticated HTTP file server on port 8084 with a browsable directory listing that reveals per-host image UUIDs. Anyone on the provisioning network can download those images and recover the embedded Ignition config, which contains the cluster pull secret and an optional SSH key.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bare-metal","image-customization-controller","infrastructure","kubernetes","openshift"],"not_affected_if":["isolated-provisioning-network","no-bare-metal-provisioning"],"how_to_check":"- Bare metal IPI clusters only: check the image-customization-controller pod in the openshift-machine-api namespace (oc -n openshift-machine-api get pods | grep image-customization).\n- From a host on the provisioning network or a workload pod, request http://<controller-ip>:8084/ ; a directory listing of UUID-named images means it is exposed.\n- Red Hat's page lists no fixed OpenShift version; check Bugzilla 2526334 / OCPBUGS-105396 and the Red Hat CVE page for errata.","fix":null,"status":"open","published_at":"2026-11-03T19:18:10+00:00","first_seen_at":"2026-11-03T19:44:53+00:00","triaged_at":"2026-11-03T19:45:35+00:00","updated_at":"2026-11-03T19:46:48+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-11-03T19:45:35Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"OpenShift bare metal provisioning: unauthenticated image server leaks cluster pull secret","impact":"high","summary":"The image-customization-controller in OpenShift's bare metal provisioning stack serves an unauthenticated HTTP file server on port 8084 with a browsable directory listing that reveals per-host image UUIDs. Anyone on the provisioning network can download those images and recover the embedded Ignition config, which contains the cluster pull secret and an optional SSH key.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["openshift","bare-metal","image-customization-controller","kubernetes"],"confidence":0.7,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker recovers cluster pull secret and SSH key from images","analyst_note":"Find the fixed OpenShift version and any documented workaround for port 8084 from the NVD entry and Red Hat advisory; sources given do not state them.","how_to_check":"- Check whether the `image-customization-controller` is deployed in the cluster (bare metal provisioning stack).\n- Confirm whether port `8084` on the provisioning network is reachable from hosts that should not have access to it.\n- Check the cluster's OpenShift version against the fixed release in the sources, which were not specified: unknown.","plain_action":"","needs_analyst":true,"not_affected_if":["no-bare-metal-provisioning","isolated-provisioning-network"],"who_is_affected":"Clusters that use OpenShift's bare metal provisioning stack, where the image-customization-controller serves images on the provisioning network. An attacker must be adjacent on that network; clusters without bare metal provisioning or with the provisioning network isolated are less exposed. The sources do not state the fixed version or a configuration workaround.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000824,"input_tokens":4892,"output_tokens":670,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the fixed OpenShift version and any documented workaround for port 8084 from the NVD entry and Red Hat advisory; sources given do not state them.","search":"'-100':304C '-2026':13A,16A '-82976':14A,17A '/etc/authfile.json':329C '5':298C '8084':48B,114C,296C '94':303C 'access':138C 'addr':293C 'adjac':192C,332C 'anyon':61B 'append':251C 'attack':194C,330C 'auth':282C 'authent':117C 'authfil':317C 'b':315C 'b.ironicagentpullsecret':323C 'bare':2A,19B,36B,101C 'bare-met':18B 'base64':173C,321C 'base64-encoded':172C 'bound':277C 'browsabl':51B,124C,225C 'caller':158C 'client':336C 'cluster':9A,79B,175C,214C,348C 'cmd/controller/main.go':274C 'config':75B,169C,210C 'contain':77B,170C 'control':24B,32B,96C,106C,139C 'custom':23B,31B,95C,119C 'cve':12A,15A 'data':320C 'default':295C 'defer':242C 'directori':52B,126C,151C,201C,223C 'disclos':153C 'download':67B,203C,342C 'emb':166C 'embed':73B,208C,308C,345C 'encod':174C 'enumer':196C,227C 'err':300C 'error':240C,264C 'everi':310C 'evid':220C 'expos':122C 'extract':206C,344C 'f':234C,258C,272C 'f.images':249C 'f.log.info':265C 'f.mu.lock':241C 'f.mu.unlock':243C 'file':44B,110C,275C 'filenam':149C 'flaw':88C 'found':90C 'fs.fileinfo':239C,245C 'func':233C,257C,290C,314C 'get':337C 'go':232C,285C,289C,313C 'host':58B,143C,188C 'html':125C 'http':43B,109C 'http.file':263C 'http.fileserver':287C 'http.handle':286C 'http.server':292C 'ignit':74B,168C,209C,346C 'ignition_config_types_32.file':318C,325C 'ignition_config_types_32.node':327C 'ignitionbuild':316C 'im':247C,253C 'imag':6A,22B,30B,59B,69B,94C,131C,144C,165C,198C,205C,230C,312C,340C 'image-customization-control':21B,29B,93C 'imagefilesystem':120C,235C,259C 'imagesbindaddr':294C 'imageserver.filesystem':288C 'implement':121C 'infrastructur':25B 'int':238C 'interfac':280C 'iron':179C 'iso/initramfs':343C 'key':86B,182C,219C,353C 'keyfil':190C 'kubernet':26B 'leak':8A 'list':53B,127C,152C,202C,338C 'metal':3A,20B,37B,102C 'n':237C 'name':231C,261C,268C,270C,341C 'network':65B,162C,193C,335C 'networkmanag':189C 'nil':256C,273C 'node':326C 'open':260C,266C 'openshift':1A,27B,34B,99C 'option':84B,178C 'path':135C,267C,328C 'pattern':331C 'per':57B,142C,187C 'per-host':56B,141C,186C 'pkg/ignition/service_config.go':302C 'pkg/imagehandler/imagefilesystem.go':221C 'port':47B,113C 'provis':4A,38B,64B,103C,161C,334C 'provisioning-network':333C 'proxi':183C 'pull':10A,80B,176C,215C,305C,349C 'ramdisk':180C 'random':147C 'rang':248C 'readdir':236C 'readheadertimeout':297C 'recov':71B,212C,347C 'regist':107C,130C 'result':244C,250C,252C,255C 'return':254C,271C,324C 'reveal':55B 'root':134C,222C 'secret':11A,81B,177C,216C,306C,350C 'serv':40B,164C,311C 'server':7A,45B,111C,276C,291C 'server.listenandserve':301C 'set':184C 'sourc':319C 'ssh':85B,181C,218C,352C 'stack':39B,104C 'string':262C 'strings.trimspace':322C 'time.second':299C 'tls':284C 'unauthent':5A,42B 'use':97C 'uuid':60B,148C,155C,199C,229C,339C 'via':200C 'without':281C","nicknames":[],"mitigations":[],"who_affected":"Clusters installed with OpenShift's bare metal IPI provisioning, where the image-customization-controller in openshift-machine-api serves images on port 8084 with no auth or TLS. Anyone adjacent on the provisioning network (or a workload pod that can reach it) can list and download images and recover the cluster pull secret and optional SSH key. Clusters without bare metal provisioning, or with the provisioning network isolated, can skip it.","tier":"B","verified":{"workarounds":{"at":"2026-11-03T19:46:48Z","by":"analyst","doc":"https://access.redhat.com/security/cve/CVE-2026-82976","run_id":1523},"who_affected":{"at":"2026-11-03T19:46:48Z","by":"analyst","doc":"https://access.redhat.com/security/cve/CVE-2026-82976","run_id":1523}},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["baremetal","high","imagecustomizationcontroller","infrastructure","kubernetes","openshift"],"campaign_type":null,"first_public_at":"2026-11-03T19:18:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82976","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82976","severity":null,"published_at":"2026-11-03T19:18:10+00:00","modified_at":"2026-11-03T19:18:10+00:00","first_seen_at":"2026-11-03T19:44:53+00:00","fetched_at":"2026-11-03T19:44:53+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-82976:1523","url":null,"severity":null,"published_at":"2026-11-03T19:46:48+00:00","modified_at":"2026-11-03T19:46:48+00:00","first_seen_at":"2026-11-03T19:46:48+00:00","fetched_at":"2026-11-03T19:46:48+00:00","note":"Red Hat CVE page read: Important 7.1, no fixed OCP version published on page; workaround is network restriction of port 8084 plus rotation. Fix unknown."}],"documents":[{"id":60318,"url":"https://access.redhat.com/security/cve/CVE-2026-82976","title":"Red Hat CVE-2026-82976","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":60318,"url":"https://access.redhat.com/security/cve/CVE-2026-82976","title":"Red Hat CVE-2026-82976","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mitigation","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}