Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy

Description

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.

Timeline

Scores

EPSS (exploitation in 30 days)

2.3% · top 16% of all CVEs (7 Nov 2026)

CISA SSVC

Exploitation: poc · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.1.

Weakness

• CWE-250: Execution with Unnecessary Privileges (opens in a new tab)All about CWE-250 and its CVEs

Affected products

• openshift/builder

  • affected < 0b62633adfa2836465202bc851885e078ec888d1

• Red Hat · Red Hat OpenShift Container Platform 4.12

  • unaffected v4.12.0-202409121032.p1.g609473f.assembly.stream.el8 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.13

  • unaffected v4.13.0-202409120505.p1.g2c7e99d.assembly.stream.el8 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.14

  • unaffected v4.14.0-202409111409.p1.g52565ca.assembly.stream.el8 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.15

  • unaffected v4.15.0-202409101936.p1.ge7749a3.assembly.stream.el8 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.16

  • unaffected v4.16.0-202409101737.p1.gfee4b58.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.17

  • unaffected v4.17.0-202409122005.p1.gcfcf3bd.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501281202.p0.g336d783.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g914783c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502010001.p0.g061909a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.ge905646.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g526498a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.ga371641.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502040032.p0.gc864494.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd352778.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g700802f.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g314589c.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9 – < *

• Red Hat · Red Hat OpenShift Container Platform 4.18

  • unaffected 418.94.202502100215-0 – < *

Affected packages

From reviewed advisories of the GitHub Advisory Database.

• Gogithub.com/openshift/builderGHSA-qqv8-ph7f-h3f7 (opens in a new tab)

What to do

Workaround: Cluster admins can follow the instructions in "Securing Builds by Strategy" to block use of the "Docker" build strategy on a cluster, or restrict the use to a set of highly trusted users, until the cluster is able to be upgraded. https://docs.openshift.com/container-platform/4.16/cicd/builds/securing-builds-by-strategy.html

References (11)

• RHSA-2024:3718 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:6122 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:6685 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:6687 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:6689 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:6691 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:6705 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/security/cve/CVE-2024-7387 (opens in a new tab)vdb-entryx_refsource_REDHAT
• RHBZ#2302259 (opens in a new tab)issue-trackingx_refsource_REDHAT
• https://github.com/openshift/builder/commit/0b62633adfa2836465202bc851885e078ec888d1 (opens in a new tab)
• https://stuxxn.github.io/advisory/2024/10/02/openshift-build-docker-priv-esc.html (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisory GHSA-qqv8-ph7f-h3f7 (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-7387](https://trackcve.app/badge/CVE-2024-7387.svg)](https://trackcve.app/cve/CVE-2024-7387)

Record last updated 11 Aug 2026, 14:55 UTC.