CVE-2016-1906: Authorization bypass in Openshift
Summary
CVE-2016-1906: Authorization bypass in Openshift. Affects github.com/openshift/origin versions < 1.1.1. Fixed in 1.1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Openshift is an open-source container application platform that allows developers to build, deploy, and manage applications. It is written in Go and provides a scalable and flexible infrastructure for running containerized applications. The vulnerability identified as CVE-2016-1906 allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
Vulnerability Detail
The vulnerability in Openshift arises from a flaw in the authorization mechanism. Attackers can exploit this flaw by manipulating the build configuration to change the allowed type to a type that is not permitted. This bypasses the intended access controls and grants unauthorized privileges to the attacker. The impact of this vulnerability can be severe, as it allows attackers to perform actions and access resources that they should not have permission for.
How To Fix
Latest published version: v1.6.2 as of 22 Oct 2026
go get github.com/openshift/origin@v1.6.2Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.1.1
This is the first release that contains the fix.
go get github.com/openshift/origin@v1.1.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by updating the Openshift package to the latest version.
Conclusion
The CVE-2016-1906 vulnerability in Openshift allows remote attackers to bypass authorization and gain unauthorized privileges. It is crucial to update the Openshift package to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for github.com/openshift/origin →
FAQ
Openshift is an open-source container application platform that allows developers to build, deploy, and manage applications.
The vulnerability allows remote attackers to gain unauthorized privileges, potentially leading to unauthorized access and actions within the Openshift environment.
To fix this vulnerability, update the Openshift package to version 1.1.1 or later.
No, there is no known workaround. Updating to the latest version is the recommended solution.
For more information, refer to the CVE-2016-1906 advisory and the Openshift project documentation.
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/openshift/origin.
