CVE-2016-1906: Authorization bypass in Openshift in github.com/openshift/origin
Summary
CVE-2016-1906: Authorization bypass in Openshift in github.com/openshift/origin. Affects github.com/openshift/origin versions < 1.1.1. Fixed in 1.1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The package github.com/openshift/origin is an open-source project that provides a platform for building, deploying, and managing containerized applications. It is written in Go and is a part of the Openshift ecosystem. Openshift is a cloud computing platform that allows developers to build, test, and deploy applications with ease. This vulnerability affects the authorization mechanism in Openshift, potentially allowing unauthorized access to sensitive resources.
Vulnerability Detail
The vulnerability in Openshift, identified as CVE-2016-1906, is an authorization bypass issue. It allows an attacker to bypass the authentication and authorization mechanisms in Openshift, gaining unauthorized access to resources. This can lead to various security risks, such as unauthorized data access, privilege escalation, and potential compromise of the entire system. The vulnerability was discovered in the github.com/openshift/origin package and has been assigned the identifier GO-2022-0854. It was first published on 2024-08-21 and has not yet been reviewed.
How To Fix
Latest published version: v1.6.2 as of 22 Oct 2026
go get github.com/openshift/origin@v1.6.2Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.1.1
This is the first release that contains the fix.
go get github.com/openshift/origin@v1.1.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update the package to the fixed version as soon as possible to mitigate the risk of unauthorized access.
Conclusion
The vulnerability CVE-2016-1906 in the github.com/openshift/origin package allows for an authorization bypass in Openshift, potentially leading to unauthorized access and compromise of sensitive resources. It is crucial to update the package to version 1.1.1 or later to mitigate the risk. No known workarounds are available.
See every vulnerability recorded for github.com/openshift/origin →
FAQ
Openshift is a cloud computing platform that allows developers to build, test, and deploy applications with ease. It provides a platform for building, deploying, and managing containerized applications.
The vulnerability allows unauthorized access to sensitive resources in Openshift, potentially leading to unauthorized data access, privilege escalation, and compromise of the entire system.
To fix this vulnerability, update the github.com/openshift/origin package to version 1.1.1 or later. Rebuild your applications to ensure they are using the patched version.
There is no known workaround for this vulnerability. It is crucial to update the package to the fixed version as soon as possible.
You can find more information about this vulnerability in the vulnerability database entry: https://pkg.go.dev/vuln/GO-2022-0854
Related vulnerabilities
Recent vulnerabilities recorded for github.com/openshift/origin.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
