CVE-2026-62284 | osac-project osac-operator Console Proxy clientcmd.RESTConfigFromKubeConfig users/clusters server-side request forgery (7e4222b)

October 30, 2026 Yanac

A vulnerability labeled as critical has been found in osac-project osac-operator. The impacted element is the function clientcmd.RESTConfigFromKubeConfig of the component Console Proxy. The manipulation of the argument users/clusters results in server-side request forgery.

This vulnerability was named CVE-2026-62284. The attack may be performed from remote. There is no available exploit.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More