CVE-2026-15809: Red Hat Confidential Compute Attestation

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

Affected products

  • Red Hat Confidential Compute Attestation
  • Red Hat Red Hat Openshift Container Platform 4
  • Red Hat Red Hat Openshift Container Platform 4.12: before 0:1.25.5-36.rhaos4.12.git2e7f657.el8 (fixed in 0:1.25.5-36.rhaos4.12.git2e7f657.el8)
  • Red Hat Red Hat Openshift Container Platform 4.13: before 0:1.26.5-32.rhaos4.13.git1088e36.el8 (fixed in 0:1.26.5-32.rhaos4.13.git1088e36.el8)
  • Red Hat Red Hat Openshift Container Platform 4.14: before 0:1.27.8-22.rhaos4.14.git0633bf1.el8 (fixed in 0:1.27.8-22.rhaos4.14.git0633bf1.el8)
  • Red Hat Red Hat Openshift Container Platform 4.15: before 0:1.28.11-17.rhaos4.15.git48e6ddb.el8 (fixed in 0:1.28.11-17.rhaos4.15.git48e6ddb.el8)
  • Red Hat Red Hat Openshift Container Platform 4.16: before 0:1.29.13-14.rhaos4.16.git84cfdc6.el8 (fixed in 0:1.29.13-14.rhaos4.16.git84cfdc6.el8)
  • Red Hat Red Hat Openshift Container Platform 4.17: before 0:1.30.14-13.rhaos4.17.git3a25d98.el8 (fixed in 0:1.30.14-13.rhaos4.17.git3a25d98.el8)
  • Red Hat Red Hat Openshift Container Platform 4.18: before 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8 (fixed in 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8)
  • Red Hat Red Hat Openshift Container Platform 4.19: before 0:1.32.13-11.rhaos4.19.git089e95c.el9 (fixed in 0:1.32.13-11.rhaos4.19.git089e95c.el9)
  • Red Hat Red Hat Openshift Container Platform 4.20: before 0:1.33.13-5.rhaos4.20.git7ebc848.el9 (fixed in 0:1.33.13-5.rhaos4.20.git7ebc848.el9)
  • Red Hat Red Hat Openshift Container Platform 4.21: before 0:1.34.11-4.rhaos4.21.git358c4b4.el9 (fixed in 0:1.34.11-4.rhaos4.21.git358c4b4.el9)
  • Red Hat Red Hat Openshift Container Platform 4.22: before 0:1.35.6-5.rhaos4.22.git41f610b.el9 (fixed in 0:1.35.6-5.rhaos4.22.git41f610b.el9)

Published 2026-07-15. Last modified 2026-10-01.