{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"assisted/agent-preinstall-image-builder-rhel9","product":"Assisted Installer for Red Hat OpenShift Container Platform 2","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhai/assisted-installer-agent-rhel9","product":"Assisted Installer for Red Hat OpenShift Container Platform 2","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhai/assisted-installer-controller-rhel9","product":"Assisted Installer for Red Hat OpenShift Container Platform 2","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/assisted-installer-agent-rhel8","product":"Multicluster Engine for Kubernetes","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/assisted-installer-agent-rhel9","product":"Multicluster Engine for Kubernetes","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/assisted-installer-controller-rhel8","product":"Multicluster Engine for Kubernetes","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/assisted-installer-controller-rhel9","product":"Multicluster Engine for Kubernetes","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-agent-installer-csr-approver-rhel8","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-agent-installer-csr-approver-rhel9","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-agent-installer-orchestrator-rhel8","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-agent-installer-orchestrator-rhel9","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift5/ose-agent-installer-csr-approver-rhel9","product":"Red Hat OpenShift Container Platform 5","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift5/ose-agent-installer-orchestrator-rhel9","product":"Red Hat OpenShift Container Platform 5","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-19706","cwes":["CWE-306"],"description":"During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation.\n\nAn attacker on the install network can retrieve the unauthenticated Ignition file (ports 22623/22624), extract a limited kubeconfig, submit a CSR for CN=system:admin, receive the signed certificate, and gain full cluster-admin access.\n\nExploitable only during the narrow bootstrap window.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.3,"severity":"high","source":"CNA: redhat","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},{"score":8.3,"severity":"high","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794266242743,"publishedAt":1794244811310,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-19706"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515215"},{"source":"CNA: redhat","tags":[],"url":"https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/installing_an_on-premise_cluster_with_the_agent-based_installer/index"},{"source":"CNA: redhat","tags":[],"url":"https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/security/cve/CVE-2026-19706"},{"source":"secalert@redhat.com","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515215"},{"source":"secalert@redhat.com","tags":[],"url":"https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/installing_an_on-premise_cluster_with_the_agent-based_installer/index"},{"source":"secalert@redhat.com","tags":[],"url":"https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/"}],"remediation":[],"revision":"bc62b2cfbc40b2a3c6e7607529c9f2393044680c5058d4b6f4174eda64290b3e","sources":[{"modifiedAt":1794264465042,"name":"CNA: redhat","retrievedAt":1794265808541,"url":"https://www.cve.org/CVERecord?id=CVE-2026-19706"},{"modifiedAt":1794266242743,"name":"NVD","retrievedAt":1794269945999,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19706"}],"ssvc":{"assessedAt":1794264282460,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Openshift/installer: openshift installer: unconditional csr approval during agent-based installation (abi) bootstrap","updatedAt":1794269945999}