CVE-2026-87114: Red Hat Pen Drive Powered By Red Hat Lightspeed

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator's workstation. If the Docker daemon requires elevated privileges, the untrusted code may execute with root-mediated daemon privileges, posing a significant security risk.

Affected products

• Red Hat Pen Drive Powered By Red Hat Lightspeed
• Red Hat Red Hat Openshift Container Platform 4.19: before 1790632105 (fixed in 1790632105)
• Red Hat Red Hat Openshift Container Platform 4.20: before 1790707563 (fixed in 1790707563)
• Red Hat Red Hat Openshift Container Platform 4.21: before 1790707362 (fixed in 1790707362)
• Red Hat Red Hat Openshift Container Platform 4.22: before 1790718431 (fixed in 1790718431)

Published 2026-09-28. Last modified 2026-10-07.