CVE-2024-1725: Red Hat Openshift Container Platform

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.

Affected products

• Red Hat Openshift Container Platform: version 4.13 only; version 4.14 only; version 4.15 only
• Red Hat Openshift Container Platform For ARM64: version 4.13 only; version 4.14 only; version 4.15 only
• Red Hat Openshift Container Platform For IBM Z: version 4.13 only; version 4.14 only; version 4.15 only
• Red Hat Openshift Container Platform For Linuxone: version 4.13 only; version 4.14 only; version 4.15 only
• Red Hat Openshift Container Platform For Power: version 4.13 only; version 4.14 only; version 4.15 only

Published 2024-03-07. Last modified 2026-06-17.