5.4
Medium
CVE-2026-71297 A flaw was found in the maestro gRPC broker
Description
A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forged agent status, which can compromise data integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Multicluster Engine for Kubernetes | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2511518 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Multicluster Engine for Kubernetes
The 79 CVEs of Multicluster Engine for Kubernetes →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium
CVE-2026-114236
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…
3.3
Low
CVE-2026-71299
A flaw was found in Maestro
6.5
Medium
CVE-2026-71298
A flaw was found in maestro
6.4
Medium