A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with… (CVE-2026-73729)

This vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. An authenticated user with low privilege and local access to upstream AFC dependencies can exploit this flaw to access sensitive information that should be restricted. The vulnerability impacts confidentiality but does not affect integrity or availability. The CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, indicating local attack vector, low attack complexity, low privileges required, no user interaction, scope changed, high confidentiality impact, and no integrity or availability impact.

Successful exploitation allows an attacker with low privilege local access to view sensitive information beyond their authorized access level. This could lead to unauthorized data disclosure but does not directly impact system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a fix is available, restrict local access to authorized users only and monitor for suspicious activity related to AFC dependencies.