Openshift/installer: openshift installer: unconditional csr approval during agent-based installation (abi) bootstrap
- Exploited
- No known exploitation
- Fix
- No fix listed
- Who is exposed
- Not reported
Do first: Workaround: The facts list no workaround. Limit exposure by keeping the bootstrap node's API server off networks others can reach until bootstrap finishes, since the attack needs network access during that window.
- Last modified
- A 0-100 score for how much a CVE matters across the industry: exploitation, exposure, how widely the software is used, severity and whether a fix exists.What do these mean? →
- 24/100 · provisional
- How many real-world setups can hit the bug, from the vendor's advisory and CISA data. It does not know your setup.What do these mean? →
- Unclear
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
Openshift installer software is affected during agent-based installation bootstrap, when the bootstrap node automatically approves every certificate signing request without checking identity. An attacker on the same install network, without logging in, can abuse this to obtain full cluster-admin access, but only during the narrow bootstrap window.
Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them.
Read the original description
During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation.
An attacker on the install network can retrieve the unauthenticated Ignition file (ports 22623/22624), extract a limited kubeconfig, submit a CSR for CN=system:admin, receive the signed certificate, and gain full cluster-admin access.
Exploitable only during the narrow bootstrap window.
cve.now Index
- Exploitation0/40No signal
- Exposure?/25Unknown. Advisories don't say whether default setups are affected
- Reach10/20Shipped in major Linux distributions
- Severity9.3/10CVSS 8.3, total technical impact per CISA
- No patch5/5No patch listed yet
What would change the score
- Would score about 79 if added to CISA KEV
- Would score about 74 if CISA's SSVC rates exploitation active
- Would score about 46 if advisories confirm default setups are exposed
What to do
Workaround: The facts list no workaround. Limit exposure by keeping the bootstrap node's API server off networks others can reach until bootstrap finishes, since the attack needs network access during that window.
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- assisted/agent-preinstall-image-builder-rhel9
Version range not reported
- rhai/assisted-installer-agent-rhel9
Version range not reported
- rhai/assisted-installer-controller-rhel9
Version range not reported
- multicluster-engine/assisted-installer-agent-rhel8
Version range not reported
- multicluster-engine/assisted-installer-agent-rhel9
Version range not reported
- multicluster-engine/assisted-installer-controller-rhel8
Version range not reported
- multicluster-engine/assisted-installer-controller-rhel9
Version range not reported
- openshift4/ose-agent-installer-csr-approver-rhel8
Version range not reported
Show all 13 packagesShow fewer packages
- openshift4/ose-agent-installer-csr-approver-rhel9
Version range not reported
- openshift4/ose-agent-installer-orchestrator-rhel8
Version range not reported
- openshift4/ose-agent-installer-orchestrator-rhel9
Version range not reported
- openshift5/ose-agent-installer-csr-approver-rhel9
Version range not reported
- openshift5/ose-agent-installer-orchestrator-rhel9
Version range not reported
Evidence 4
- Report
- Link
- Link
- Link
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about CVE-2026-19706
Is CVE-2026-19706 being exploited?
It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.Source: cve.now feed data
What does this mean?
During an OpenShift Agent-Based Installation, the bootstrap node runs approve-csr.service, which approves certificate signing requests without checking them. A network-reachable attacker could obtain a certificate signed for system:admin during that window, which grants full cluster-admin access.Source: bugzilla.redhat.com, access.redhat.com
Am I affected, and how do I check?
The bug only matters during the bootstrap phase of an Agent-Based Installation. The listed products are Assisted Installer for OpenShift, Multicluster Engine for Kubernetes, and Red Hat OpenShift Container Platform 4 and 5, but the facts give no version ranges. Check the installation method and version against the vendor advisory.Source: bugzilla.redhat.com, access.redhat.com
How do I fix CVE-2026-19706?
The facts do not name a fixed version, so no upgrade target can be given. Check the Red Hat advisory for a fixed release before running another agent-based installation.Source: bugzilla.redhat.com, access.redhat.com
What if there's no patch?
The facts list no workaround. Limit exposure by keeping the bootstrap node's API server off networks others can reach until bootstrap finishes, since the attack needs network access during that window.Source: bugzilla.redhat.com, access.redhat.com