CVE-2026-71567

7.7 Élevée

Publiée le 17/08/2026 à 17:16 · Modifiée le 01/09/2026 à 23:03 · En attente d'analyse NVD · Source : 74b3a70d-cca6-4d34-9789-e83b222ae3be

Description

In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials (which are not verified by FakeFish).

Traduire en français

Produits concernés

openshift-metal3 fakefish

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.7 Élevée	74b3a70d-cca6-4d34-9789-e83b222ae3be	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-78

Références

https://github.com/openshift-metal3/fakefish/security/advisories/GHSA-xfhv-fp7q-v2cc

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories