The vulnerability resides in the spec.path YAML stanza of Route objects in OpenShift Container Platform. Insufficient validation allows attackers to inject arbitrary HAProxy configuration directives. This injection can alter load‑balancing rules or inject commands, enabling remote code execution on the cluster nodes that run the HAProxy process. The primary consequence is a breach of confidentiality, integrity, and availability of the affected services and potentially the underlying host if the injected configuration exploits system privileges.

The affected product is Red Hat OpenShift Container Platform 4. Specific version information is not provided in the CVE data, so administrators should verify whether their deployment runs the identified component of the cluster ingress operator.

The CVSS score of 8.8 indicates a high severity impact. The EPSS score is not available, but the absence of a KEV listing suggests no confirmed active exploitation in the wild at the time of this analysis. Attackers can exploit the flaw from an external network by creating a malicious Route resource, assuming they have permission to define Routes. The path injection can lead to arbitrary code execution via the HAProxy configuration loaded by the ingress operator.