CVE-2026-71297

5.4 Moyenne

Publiée le 05/10/2026 à 22:17 · Modifiée le 06/10/2026 à 17:17 · En attente d'analyse NVD · Source : secalert@redhat.com

Description

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forged agent status, which can compromise data integrity.

Traduire en français

Produits concernés

Red Hat Multicluster Engine for Kubernetes

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	secalert@redhat.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-306

Références

https://access.redhat.com/security/cve/CVE-2026-71297
https://bugzilla.redhat.com/show_bug.cgi?id=2511518

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories