Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-06-30T18:40:39 github.com/sigstore/fulcio: Fulcio: Server-Side Request Forgery and Kubernetes ServiceAccount token leakage 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CWE-918

A flaw was found in Fulcio's OpenID Connect (OIDC) Discovery client. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) by redirecting discovery requests to internal systems. Additionally, an attacker can manipulate the JSON Web Key Set (JWKS) Uniform Resource Identifier (URI) to poison the verifier cache with malicious keys, enabling the validation of attacker-controlled signatures. Furthermore, the flaw can lead to the leakage of Kubernetes ServiceAccount tokens to third-party hosts through cross-host redirects or misconfigured MetaIssuers, potentially exposing sensitive cluster credentials.

A flaw was found in Fulcio's OIDC Discovery client. Three related vulnerabilities allow exploitation when a configured OIDC issuer is compromised or malicious: (1) Blind SSRF — the discovery client follows cross-host HTTP redirects, allowing a malicious issuer to redirect Fulcio's metadata fetch requests to internal-only systems (e.g., cloud IMDS endpoints, RFC 1918 addresses); (2) JWKS substitution — the redirected discovery flow can return a manipulated jwks_uri pointing to an attacker-controlled host, poisoning the verifier cache with attacker keys and enabling validation of attacker-controlled signatures; (3) Kubernetes ServiceAccount token leakage — the in-cluster SA token is attached globally by the HTTP transport, leaking it to third-party hosts during cross-host redirects or when wildcard MetaIssuers match external endpoints. Exploitation requires a compromised or malicious OIDC issuer already trusted in the Fulcio configuration. In typical Red Hat Trusted Artifact Signer deployments, OIDC issuers are explicitly configured and curated, reducing the attack surface."}] Upgrade to Fulcio v1.8.6 or later. No workaround is available. Assisted Installer for Red Hat OpenShift Container Platform 2 Affected assisted/agent-preinstall-image-builder-rhel9 Assisted Installer for Red Hat OpenShift Container Platform 2 Not affected fulcio Confidential Compute Attestation Not affected fulcio Confidential Compute Attestation Affected openshift-sandboxed-containers/osc-must-gather-rhel9 Kernel Module Management Operator for Red Hat Openshift Not affected fulcio Kernel Module Management Operator for Red Hat Openshift Affected kmm/kernel-module-management-must-gather-rhel9 Lightspeed Core Not affected fulcio Lightspeed Core Affected lightspeed-core/rag-tool-cpu-rhel9 Lightspeed Core Affected lightspeed-core/rag-tool-cuda-12.9-rhel9 Logging Subsystem for Red Hat OpenShift Not affected fulcio Logging Subsystem for Red Hat OpenShift Affected openshift-logging/cluster-logging-rhel9-operator Logical Volume Manager Storage Not affected fulcio Logical Volume Manager Storage Affected lvms4/lvms-must-gather-rhel9 Migration Toolkit for Containers Not affected fulcio Migration Toolkit for Containers Affected rhmtc/openshift-migration-controller-rhel8 Migration Toolkit for Containers Affected rhmtc/openshift-migration-log-reader-rhel8 Migration Toolkit for Containers Affected rhmtc/openshift-migration-must-gather-rhel8 Migration Toolkit for Virtualization Not affected fulcio Migration Toolkit for Virtualization Affected migration-toolkit-virtualization/mtv-must-gather-rhel8 Migration Toolkit for Virtualization Affected migration-toolkit-virtualization/mtv-must-gather-rhel9 Migration Toolkit for Virtualization Affected mtv-candidate/mtv-must-gather-rhel8 Multiarch Tuning Operator Not affected fulcio Multiarch Tuning Operator Affected multiarch-tuning/multiarch-tuning-operator-bundle Multiarch Tuning Operator Affected multiarch-tuning/multiarch-tuning-rhel9-operator Multicluster Engine for Kubernetes Not affected fulcio Multicluster Engine for Kubernetes Affected multicluster-engine/assisted-installer-controller-rhel8 Multicluster Engine for Kubernetes Affected multicluster-engine/assisted-installer-controller-rhel9 Multicluster Engine for Kubernetes Affected multicluster-engine/assisted-service-8-rhel8 Multicluster Engine for Kubernetes Under investigation multicluster-engine/assisted-service-9-rhel9 Multicluster Engine for Kubernetes Affected multicluster-engine/must-gather-rhel9 Node HealthCheck Operator Not affected fulcio Node HealthCheck Operator Affected workload-availability/node-healthcheck-must-gather-rhel9 OpenShift API for Data Protection Not affected fulcio OpenShift API for Data Protection Affected oadp/oadp-mustgather-rhel9 OpenShift API for Data Protection Affected oadp/oadp-velero-plugin-rhel9 OpenShift Developer Tools and Services Not affected fulcio OpenShift Developer Tools and Services Affected ocp-tools-4/jenkins-agent-base-rhel8 OpenShift Developer Tools and Services Affected ocp-tools-4/jenkins-agent-base-rhel9 OpenShift Developer Tools and Services Affected ocp-tools-4/jenkins-rhel8 OpenShift Developer Tools and Services Affected ocp-tools-4/jenkins-rhel9 OpenShift Lightspeed Affected openshift-lightspeed/lightspeed-agentic-sandbox-rhel9 OpenShift Lightspeed Not affected openshift-lightspeed/lightspeed-rhel9-operator OpenShift Pipelines Not affected fulcio OpenShift Pipelines Affected openshift-pipelines/pipelines-chains-controller-rhel8 OpenShift Pipelines Affected openshift-pipelines/pipelines-chains-controller-rhel9 OpenShift Pipelines Affected openshift-pipelines/pipelines-cli-tkn-rhel8 OpenShift Pipelines Affected openshift-pipelines/pipelines-cli-tkn-rhel9 OpenShift Pipelines Affected openshift-pipelines/pipelines-opc-rhel9 OpenShift Serverless Not affected fulcio OpenShift Serverless Affected openshift-serverless-1/kn-plugin-event-sender-rhel9 OpenShift Serverless Affected openshift-serverless-1/serverless-must-gather-rhel9 OpenShift Service Mesh 3 Not affected fulcio OpenShift Service Mesh 3 Affected openshift-service-mesh/istio-must-gather-rhel9 Pen Drive Powered by Red Hat Lightspeed Affected pen-drive/pen-drive-scanner-rhel9 Pen Drive Powered by Red Hat Lightspeed Not affected fulcio Pen Drive Powered by Red Hat Lightspeed Affected pen-drive/pen-drive-scanner-rhel9 Power monitoring for Red Hat OpenShift Not affected fulcio Power monitoring for Red Hat OpenShift Affected openshift-power-monitoring/power-monitoring-rhel9-operator Red Hat Advanced Cluster Management for Kubernetes 2 Not affected fulcio Red Hat Advanced Cluster Management for Kubernetes 2 Affected rhacm2/acm-must-gather-rhel9 Red Hat Advanced Cluster Management for Kubernetes 2 Affected rhacm2/submariner-rhel9-operator Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-main-rhel8 Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-main-rhel9 Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-operator-bundle Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-rhel8-operator Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-rhel9-operator Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-roxctl-rhel8 Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-roxctl-rhel9 Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-scanner-v4-rhel8 Red Hat Advanced Cluster Security 4 Not affected advanced-cluster-security/rhacs-scanner-v4-rhel9 Red Hat Advanced Cluster Security 4 Not affected fulcio Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-25/aap-must-gather-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/aap-must-gather-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/ee-supported-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/hub-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/platform-resource-runner-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/aap-must-gather-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-tech-preview/ansible-devspaces-rhel9 Red Hat Ansible Automation Platform 2 Not affected fulcio Red Hat Build of Podman Desktop Not affected fulcio Red Hat Developer Hub Not affected fulcio Red Hat Developer Hub Affected rhdh/rhdh-hub-rhel9 Red Hat Developer Hub Affected rhdh/rhdh-must-gather-rhel9 Red Hat Enterprise Linux 10 Under investigation buildah Red Hat Enterprise Linux 10 Under investigation podman Red Hat Enterprise Linux 10 Affected rhel10/bootc-image-builder Red Hat Enterprise Linux 10 Affected rhel10-eus/rhel-10.0-bootc Red Hat Enterprise Linux 10 Affected rhel10-eus/rhel-10.0-bootc-image-builder Red Hat Enterprise Linux 10 Affected rhel10-eus/rhel-10.2-bootc Red Hat Enterprise Linux 10 Affected rhel10/rhel-bootc Red Hat Enterprise Linux 10 Under investigation skopeo Red Hat Enterprise Linux 10 Affected ubi10/buildah Red Hat Enterprise Linux 10 Affected ubi10/podman Red Hat Enterprise Linux 10 Affected ubi10/skopeo Red Hat Enterprise Linux 9 Affected rhel9/bootc-image-builder Red Hat Enterprise Linux 9 Affected rhel9-eus/rhel-9.6-bootc Red Hat Enterprise Linux 9 Affected rhel9-eus/rhel-9.6-bootc-image-builder Red Hat Enterprise Linux 9 Affected rhel9-eus/rhel-9.8-bootc Red Hat Enterprise Linux 9 Affected rhel9/rhel-bootc Red Hat Enterprise Linux 9 Affected ubi9/buildah Red Hat Enterprise Linux 9 Affected ubi9/skopeo Red Hat Hardened Images Not affected buildah Red Hat Hardened Images Not affected containers-common Red Hat Hardened Images Not affected cosign Red Hat Hardened Images Not affected podman Red Hat Hardened Images Not affected skopeo Red Hat OpenShift AI (RHOAI) Not affected fulcio Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-must-gather-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-th06-cpu-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-th06-cuda130-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/rhai-cli-rhel9 Red Hat OpenShift Container Platform 4 Not affected fulcio Red Hat OpenShift Container Platform 4 Affected openshift4/cnf-tests-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/cnf-tests-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/kube-compare-artifacts-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/lifecycle-agent-rhel9-operator Red Hat OpenShift Container Platform 4 Affected openshift4/network-tools-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/network-tools-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/numaresources-must-gather-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/oc-mirror-plugin-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/oc-mirror-plugin-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-agent-installer-api-server-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-agent-installer-csr-approver-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-cli Red Hat OpenShift Container Platform 4 Affected openshift4/ose-cli-artifacts Red Hat OpenShift Container Platform 4 Affected openshift4/ose-cli-artifacts-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-cli-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-csi-driver-shared-resource-mustgather-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-csi-driver-shared-resource-mustgather-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-deployer Red Hat OpenShift Container Platform 4 Affected openshift4/ose-deployer-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-docker-builder Red Hat OpenShift Container Platform 4 Affected openshift4/ose-docker-builder-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-helm-rhel9-operator Red Hat OpenShift Container Platform 4 Affected openshift4/ose-local-storage-mustgather-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-machine-config-operator Red Hat OpenShift Container Platform 4 Affected openshift4/ose-machine-config-rhel9-operator Red Hat OpenShift Container Platform 4 Affected openshift4/ose-machine-os-images-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-must-gather Red Hat OpenShift Container Platform 4 Affected openshift4/ose-must-gather-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-olm-catalogd-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-olm-operator-controller-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-openshift-controller-manager-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-operator-framework-tools-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-operator-lifecycle-manager-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-operator-registry-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-secrets-store-csi-mustgather-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-secrets-store-csi-mustgather-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-tests Red Hat OpenShift Container Platform 4 Affected openshift4/ose-tests-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-tools-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-tools-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ptp-must-gather-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/ptp-must-gather-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift-kni/commatrix Red Hat Openshift Data Foundation 4 Not affected fulcio Red Hat Openshift Data Foundation 4 Affected odf4/mcg-core-rhel9 Red Hat Openshift Data Foundation 4 Affected odf4/odf-cloudnative-pg-rhel9-operator Red Hat Openshift Data Foundation 4 Affected odf4/odf-must-gather-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/udi-base-rhel10 Red Hat OpenShift Dev Spaces Affected devspaces/udi-base-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/udi-rhel9 Red Hat OpenShift Dev Spaces Not affected fulcio Red Hat OpenShift GitOps Not affected fulcio Red Hat OpenShift GitOps Affected openshift-gitops-1/must-gather-rhel8 Red Hat OpenShift GitOps Affected openshift-gitops-1/must-gather-rhel9 Red Hat OpenShift Virtualization 4 Affected container-native-virtualization/cnv-must-gather-rhel9 Red Hat OpenShift Virtualization 4 Affected container-native-virtualization/ocp-virt-validation-checkup-rhel9 Red Hat OpenShift Virtualization 4 Not affected fulcio Red Hat OpenStack Platform 18.0 Not affected fulcio Red Hat OpenStack Platform 18.0 Affected rhoso-operators/openstack-operator-bundle Red Hat OpenStack Platform 18.0 Affected rhoso-operators/prometheus-podman-exporter-rhel9 Red Hat Quay 3 Not affected fulcio Red Hat Quay 3 Affected quay/quay-builder-rhel8 Red Hat Quay 3 Affected quay/quay-builder-rhel9 Red Hat Trusted Artifact Signer Fix deferred fulcio Red Hat Trusted Artifact Signer Affected rhtas/cosign-rhel9 Red Hat Trusted Artifact Signer Affected rhtas/ec-rhel9 Red Hat Trusted Artifact Signer Affected rhtas/fulcio-rhel9 Red Hat Trusted Artifact Signer Affected rhtas/gitsign-rhel9 Red Hat Trusted Artifact Signer Not affected rhtas/policy-controller-rhel9 Security Profiles Operator Affected compliance/openshift-security-profiles-operator-bundle Security Profiles Operator Affected compliance/openshift-security-profiles-rhel8-operator Security Profiles Operator Not affected fulcio Self-service automation portal 2 Affected ansible-automation-platform/bootc-automation-portal-rhel9 Self-service automation portal 2 Not affected fulcio https://www.cve.org/CVERecord?id=CVE-2026-49478 https://nvd.nist.gov/vuln/detail/CVE-2026-49478 https://github.com/sigstore/fulcio/security/advisories/GHSA-f5mr-q85p-6hh6