Critical Vulnerability in Red Hat OpenShift Container Platform: CVE-2026-54100
A critical vulnerability (CVE-2026-54100, CVSS 8.3) was discovered in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. This flaw allows an adjacent-network attacker to intercept or redirect WMCO's SSH session and capture sensitive credentials, potentially compromising Windows node identities in the cluster. The vulnerability has not been actively exploited but requires immediate attention due to its high severity and potential impact. Affected products include Red Hat OpenShift Container Platform 4 and Red Hat OpenShift for Windows Containers.