CVE-2026-92615mediumCWE-413

CVE-2026-92615: falha de média gravidade em Red Hat Advanced Cluster Management for…

Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat Advanced Cluster Management for Kubernetes+ Monitorar Red Hat Edge Manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.6epss 0.2%
A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs it into go-git's process-global client.Protocols map via gitclient.InstallProtocol("https", ...). Because the worker renders devices for multiple organizations concurrently from a shared goroutine pool, whichever tenant's repository configuration is written last wins for all in-flight git.Clone calls. This race condition can cause one tenant's TLS settings, including InsecureSkipVerify or mTLS client credentials, to leak into another tenant's git operations.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N
Produtos afetados
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2Red Hat · Red Hat Edge Manager 1.2Red Hat · RHEM 1.2 for RHEL 10Red Hat · RHEM 1.2 for RHEL 9
CVEs relacionadas — Red Hat Advanced Cluster Management for…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-66786CRITICALSubmariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnetsEPSS 1.4%CVE-2024-3727HIGHContainers/image: digest type does not guarantee valid typeEPSS 1.3%CVE-2024-11831MEDIUMNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptEPSS 1.1%CVE-2026-16242CRITICALHypershift: konnectivity proxy-server accepts agent connections without validating client certificatesEPSS 0.9%CVE-2024-1139HIGHCluster-monitoring-operator: credentials leakEPSS 0.9%CVE-2024-0874MEDIUMCoredns: cd bit response is cached and served laterEPSS 0.8%