5.4
Moyenne
CVE-2026-71297 A flaw was found in the maestro gRPC broker
Description
A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forged agent status, which can compromise data integrity.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Multicluster Engine for Kubernetes | Versions non publiées |
Références
- access.redhat.com access.redhat.com
- RHBZ#2511518 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Multicluster Engine for Kubernetes
Les 79 CVE de Multicluster Engine for Kubernetes →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Moyenne
CVE-2026-114236
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…
3.3
Faible
CVE-2026-71299
A flaw was found in Maestro
6.5
Moyenne
CVE-2026-71298
A flaw was found in maestro
6.4
Moyenne