Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-15140

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Everpure

Description

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to grant broader access than intended, potentially resulting in elevated privileges within the Kubernetes cluster.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Everpure Portworx Operator

Default version status: unaffected

  • 0 to ≤ 26.3.1affected
  • 26.3.2 +unaffected

References