CVE-2026-101295
Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction
CVSS Score
7.3
EPSS Score
0.1%
EPSS Percentile
4th
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image layers without validating that file paths resolve within the intended destination directory.
| CWE | CWE-22 |
| Vendor | red hat |
| Product | red hat openshift container platform 4.13 |
| Published | Sep 30, 2026 |
| Last Updated | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for red hat red hat openshift container platform 4.13
Be the first to know when new high vulnerabilities affecting red hat red hat openshift container platform 4.13 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
Low
Affected Versions
Red Hat / Red Hat OpenShift Container Platform 4.13
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.15
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.17
All versions affected Red Hat / Assisted Installer for Red Hat OpenShift Container Platform 2
All versions affected Red Hat / Red Hat OpenShift Container Platform 5
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:95746 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:95756 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:96283 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-101295 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2522941 github.com: https://github.com/openshift/oc-mirror/blob/22a5722/v1/pkg/cli/mirror/catalog_images.go#L680 github.com: https://github.com/openshift/oc-mirror/blob/22a5722/v1/pkg/cli/mirror/fbc_operators.go#L334-L369