CVE-2026-54099 | A flaw was found in the Windows Machine Config Operator (WMC… | CVSS 8.8 HIGH

Description

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A compromised Windows worker node that holds WICD credentials can submit a CSR that is auto-approved and signed by the cluster, yielding a client certificate that grants cluster-administrator privileges and enabling full cluster takeover.

Metadata

CVE ID: CVE-2026-54099
State: PUBLISHED
Assigner: redhat
Reserved: 2026-06-11 19:02 UTC
Published: 2026-06-22 12:46 UTC
Last updated: 2026-06-22 16:08 UTC
Primary CWE: CWE-269
Improper Privilege Management
Vendor / Product: Red Hat / Red Hat OpenShift Container Platform 4
Sources: cve.org · NVD

Severity & Metrics

8.8 HIGH CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (3)

Vendor	Product	Platform	Versions
Red Hat	Red Hat OpenShift Container Platform 4	—	—
Red Hat	Red Hat OpenShift Container Platform 4	—	—
Red Hat	Red Hat OpenShift for Windows Containers	—	—

Weakness (CWE)

CWE	Source	Description
CWE-269	cna	Improper Privilege Management

CVSS scores (1)

Score	Severity	Version	Source	Vector
8.8	HIGH	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (2)