CVE Explorer
CVE-2026-15584
A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:pdrive_lightspeed:1"],"defaultStatus":"affected","packageName":"pen-drive/pen-drive-scanner-rhel9","product":"Pen Drive Powered by Red Hat Lightspeed","vendor":"Red Hat"}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:533d01a31e9653de4b210a50fff8d5bfb5732902cb42059c7882cc6a3846aaa2 · sha256:67a9dc26277ee571… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:533d01a31e9653de4b210a50fff8d5bfb5732902cb42059c7882cc6a3846aaa2 · sha256:67a9dc26277ee571… · /containers/cna/metrics/1/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-250","description":"Execution with Unnecessary Privileges","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:533d01a31e9653de4b210a50fff8d5bfb5732902cb42059c7882cc6a3846aaa2 · sha256:67a9dc26277ee571… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-15584"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:533d01a31e9653de4b210a50fff8d5bfb5732902cb42059c7882cc6a3846aaa2 · sha256:67a9dc26277ee571… · /containers/cna/references/0
{"name":"RHBZ#2499647","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499647"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:533d01a31e9653de4b210a50fff8d5bfb5732902cb42059c7882cc6a3846aaa2 · sha256:67a9dc26277ee571… · /containers/cna/references/1
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.