VYPR

image-customization-controller

by Openshift

CVEs (1)

  • CVE-2026-82976HigNov 3, 2026
    risk 0.46cvss 7.1epss —

    A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. The controller registers an HTTP file server on port 8084 with no authentication. The custom imageFileSystem implementation exposes a browsable HTML directory listing of all…