# 4.18.51

Created: 2026-07-30 12:26:35 +0000 UTC

Image Digest: `sha256:4557f08f7955bf97c2c497e37dda04192bd032956dfa6fbda6f559421c3db24b`

Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:1b177f1a3a29bb53ea8a5c85146d969cd39e457698ddf2ee8e51914030ffa078


## Changes from 4.18.50

### Components

* Kubectl 1.31.1
* Kubernetes 1.31.14
* Kubernetes Tests 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202607211754-0 to 418.94.202607272025-0


### Rebuilt images without code change

* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [cb375d17](https://github.com/openshift/cluster-node-tuning-operator/commit/cb375d177811aa52b53124335de2f87f417136d8) `sha256:ea5d3729e85ea2ec99ad6b1fc5e121c184184697f88bbf87119b0f748d39437a`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:537015b93c722f9434e5d2ddbeed61a1154f86953e40e5bcd49e9cf7a6edcb2f`
* [ironic](https://github.com/openshift/ironic-image) git [75856ee3](https://github.com/openshift/ironic-image/commit/75856ee3e738e9941b57881e31a307c1d79a4ee8) `sha256:5eaea6f751b72c05084b8e01ba7d1bdfe95016636db612bbcc03fb0a1ffd6e9e`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:75614e818e332a2e56aa7155ebf739de75029c8530be1deaa53b43c34c5a2c3f`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [01882e9e](https://github.com/openshift/monitoring-plugin/commit/01882e9e933c81141b22d0095827ec5f0ec44ccf) `sha256:8ec9d05f50f81bd90d9596f393c9e8fdf68a3e752bd4c3b4dab9fd8c05e17029`
* rhel-coreos `sha256:6d3910b7eea4e246be57c07b66bd314ebf3f6d07e44d5df9e648bb7e616eefa2`
* rhel-coreos-extensions `sha256:edb1792525f8eea65e05fbb9edd2d33ed580e34483581030ac988393b6611e3b`


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/f0e7fae4b6b9a2777c498b23b818e306954aaf3e)

* [OCPBUGS-80219](https://issues.redhat.com/browse/OCPBUGS-80219): Fix CVE-2026-33186 using openshift-sustaining grpc-go fork [#1041](https://github.com/openshift/cloud-credential-operator/pull/1041)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/363e98bd7ca3872072a8aad152525c61388b10a5...f0e7fae4b6b9a2777c498b23b818e306954aaf3e)


### [console](https://github.com/openshift/console/tree/e98893bd0feddafbd5dbe8b355cf85a0bd946271)

* [OCPBUGS-91944](https://issues.redhat.com/browse/OCPBUGS-91944): Prevent binary secret data corruption when editing [#16673](https://github.com/openshift/console/pull/16673)
* [OCPBUGS-99487](https://issues.redhat.com/browse/OCPBUGS-99487): Disable Knative e2e Cypress tests in CI [#16803](https://github.com/openshift/console/pull/16803)
* [OCPBUGS-99648](https://issues.redhat.com/browse/OCPBUGS-99648): Disable shipwright e2e tests to unblock CI [#16818](https://github.com/openshift/console/pull/16818)
* [OCPBUGS-86453](https://issues.redhat.com/browse/OCPBUGS-86453): [release-4.18] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16511](https://github.com/openshift/console/pull/16511)
* Fix for OCPBUGS-81604: CVE-2026-4800 [#16563](https://github.com/openshift/console/pull/16563)
* [Full changelog](https://github.com/openshift/console/compare/551206fcfd31f4a8d96314e73c5bf4a1f03bbf57...e98893bd0feddafbd5dbe8b355cf85a0bd946271)


### [hypershift](https://github.com/openshift/hypershift/tree/e503a20f6760cefcfc4d6987f1a0a908683d67b6)

* [OCPBUGS-99142](https://issues.redhat.com/browse/OCPBUGS-99142): fix(backport): konnectivity agent auth [#9096](https://github.com/openshift/hypershift/pull/9096)
* [Full changelog](https://github.com/openshift/hypershift/compare/aa97a7f2cb6f2cb4f783cc9719523c1809fc4d13...e503a20f6760cefcfc4d6987f1a0a908683d67b6)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a362b5965c47d38e15cfe32f69e66a525819e45c)

* [OCPBUGS-94116](https://issues.redhat.com/browse/OCPBUGS-94116): move cleanUpDuplicatedMC to avoid double reboot on first updated  [#6249](https://github.com/openshift/machine-config-operator/pull/6249)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/cb086bddfb6c687d4cc49cf86976bc34472ae04b...a362b5965c47d38e15cfe32f69e66a525819e45c)


### [prometheus](https://github.com/openshift/prometheus/tree/632e9bbd28f5aa8b2c8f88e564aadad5a752bc0f)

* [OCPBUGS-88628](https://issues.redhat.com/browse/OCPBUGS-88628): remote: validate snappy decoded length before allocation in read endpoint [#346](https://github.com/openshift/prometheus/pull/346)
* [Full changelog](https://github.com/openshift/prometheus/compare/988ce8bbdcaea76028aa84c6bbd2f6a1f08fd1a4...632e9bbd28f5aa8b2c8f88e564aadad5a752bc0f)