CVE-2026-53475 describes a critical security vulnerability in the assisted-migration-agent application where insecure TLS connections are hardcoded during communication with vCenter. This improper certificate validation enables an attacker positioned as a MITM to intercept and harvest administrator credentials for vCenter, compromising confidentiality and integrity. The vulnerability is publicly known as of June 10, 2026, with a CVSS 3.1 base score of 9.3 (Attack Vector: Adjacent Network, Low Attack Complexity, No Privileges Required, No User Interaction, Scope Changed, High Confidentiality and Integrity impact, No Availability impact). The Red Hat advisory linked does not provide explicit patch or remediation details at this time.

Successful exploitation allows an attacker to intercept vCenter administrator credentials via a MITM attack, leading to unauthorized access to vCenter management interfaces. This compromises the confidentiality and integrity of the vCenter environment, potentially enabling further unauthorized actions within the infrastructure. Availability is not impacted by this vulnerability.

Patch status is not yet confirmed — check the Red Hat vendor advisory at https://access.redhat.com/security/cve/CVE-2026-53475 for current remediation guidance. Until an official fix is available, avoid using the affected assisted-migration-agent in untrusted or exposed network environments where MITM attacks are possible.