CVE-2026-10533

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

5.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L                                    

Vulnerability Description

A flaw was found in OpenShift Container Platform. Completed pods with restartPolicy: Never do not count toward ResourceQuota pod limits, and Kubernetes events are not quota-scoped. A non-privileged user who can create pods in a namespace can exploit this to generate a large volume of events that accumulate in etcd, causing API server performance degradation across the cluster.

Vulnerability Details

Published Date

June 01, 2026

Last Modified

June 01, 2026

CWE ID

CWE-770

Source

NVD

Vendor

Red Hat

Product

Red Hat OpenShift Container Platform 4

External References

https://access.redhat.com/security/cve/CVE-2026-10533
https://bugzilla.redhat.com/show_bug.cgi?id=2483727

CVE-2026-10533

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment