CVE-2026-53476: falha crítica em assisted-migration-agent
Assisted-migration-agent: vddk tarball chained-symlink arbitrary file write
Publicada em
Seguir esta CVE+ Monitorar assisted-migration-agent+ Monitorar github.com/kubev2v/assisted-migration-agent
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.6epss 0.3%
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
assisted-migration-agentCVEs relacionadas — assisted-migration-agent
No mesmo produto, das mais perigosas para as menos.