Vulnerability · Published Oct 29, 2026 · Assigned by redhat

CVE-2026-92092Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

High 7.4

In plain English

A high-severity security flaw in Red Hat OpenShift Container Platform 4 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)0.2%top 84.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle (MITM) attack or compromising the HTTP server providing these scripts, could substitute an arbitrary executable. This malicious executable would then run with the installer's user ID (UID) and full cluster-provisioning privileges, leading to arbitrary code execution.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat OpenShift Container Platform 4	see references
Red Hat	Red Hat OpenShift Container Platform 5	see references

Weakness: CWE-494 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References

https://access.redhat.com/security/cve/CVE-2026-92092 vdb-entry, x_refsource_REDHAT
RHBZ#2515862 issue-tracking, x_refsource_REDHAT