Unauthenticated Flaw Lets Attackers Hijack OpenShift Control Plane

The Konnectivity vulnerability, identified as CVE-2026-16242, is a critical issue affecting Red Hat's Logging Subsystem for OpenShift, with a CVSS score of 9.4. It allows unauthenticated remote attackers to connect to the control plane by bypassing client certificate validation. This flaw could enable attackers to intercept and manipulate control-plane traffic, posing serious risks to confidentiality, integrity, and availability.

To mitigate, users are advised to apply vendor updates for proper agent authentication and restrict network access to trusted nodes until a patch is available.