CVEvulnerability
CVE-2026-71475
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-08-11
- Last modified
- 2026-10-24
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- Weaknesses
- CWE-22
Description
A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights API URL path. This occurs because the ClusterID, which is controlled by the spoke, is used directly in the request path without proper validation or URL encoding. This vulnerability allows a malicious spoke to redirect authenticated requests to unintended API endpoints, potentially leading to information disclosure or unauthorized access.
Affected configurations
• redhat advanced cluster management for kubernetes 2.0
• redhat insights-client
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://access.redhat.com/errata/RHSA-2026:60386 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60388 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60389 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60390 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60391 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2026-71475 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512154 Issue Tracking, Vendor Advisory