Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-71469 A flaw was found in search-v2-api

Description

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-api pod, resulting in a Denial of Service (DoS).

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Advanced Cluster Management for Kubernetes 2 Versions non publiées
Red Hat Advanced Cluster Management for Kubernetes 2.11 1787689524 premières → < 1787689524 1787689524
Red Hat Advanced Cluster Management for Kubernetes 2.13 1787263804 premières → < 1787263804 1787263804
Red Hat Advanced Cluster Management for Kubernetes 2.14 1786723845 premières → < 1786723845 1786723845
Red Hat Advanced Cluster Management for Kubernetes 2.15 1787238618 premières → < 1787238618 1787238618
Red Hat Advanced Cluster Management for Kubernetes 2.16 1787191668 premières → < 1787191668 1787191668
Red Hat Advanced Cluster Management for Kubernetes 2.17 1787229541 premières → < 1787229541 1787229541

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Advanced Cluster Management for Kubernetes 2

Les 121 CVE de Red Hat Advanced Cluster Management for Kubernetes 2 →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 Élevée CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 Élevée CVE-2026-93685 A flaw was found in the multicluster-observability-addon 5.4 Moyenne
Suivre cette CVE