CVE-2026-32285

high Red Hat
CVSS v3 Base Score
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.0%
Exploitation probability in 30 days
Top 92% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
None
Integrity
None
Availability
High
Published: March 26, 2026 (106 days ago)
Last Modified: March 26, 2026
Vendor: Red Hat
Fix Available: ✓ Yes
Source: REDHAT

Description

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

CWE

CWE-1285

Affected Products

Logging Subsystem for Red Hat OpenShiftMulticluster Global HubRed Hat Ansible Automation Platform 2Red Hat Hardened ImagesRed Hat OpenShift Container Platform 4Red Hat OpenShift for Windows ContainersRed Hat OpenShift GitOpsRed Hat OpenStack Platform 18.0multicluster engine for Kubernetes 2.1multicluster engine for Kubernetes 2.8

Fix Status

✅ Fix Available

References

🔗 bugzilla.redhat.com 🔗 www.cve.org 🔗 nvd.nist.gov 🔗 github.com 🔗 github.com