CVE-2026-42151 is a security vulnerability impacting the keda-fips package and Red Hat Hardened Images RPMs, including components such as jaeger and opentelemetry-collector. The vulnerability is one of eight addressed in the keda-fips 2.19.0-r2 release and related Red Hat RPM updates. The advisories from Red Hat confirm that updated RPM packages (e.g., jaeger-2.19.0-1.hum1, opentelemetry-collector-0.153.0-1.hum1) include fixes for this CVE. The vulnerability is associated with CWEs 256 (Plaintext Storage of a Password) and 770 (Allocation of Resources Without Limits or Throttling). The vendor has issued official security advisories and patches to mitigate the risk.

The vulnerability is rated as high severity. It affects multiple versions of keda-fips and related Red Hat Hardened Images RPMs, potentially exposing affected systems to security risks related to improper resource allocation or sensitive data handling as indicated by the associated CWEs. No active exploitation has been reported, but the presence of multiple vulnerabilities fixed simultaneously suggests a significant security risk if left unpatched.

Official patches are available and should be applied promptly. The fixed version is keda-fips 2.19.0-r2 and updated Red Hat Hardened Images RPMs such as jaeger-2.19.0-1.hum1 and opentelemetry-collector-0.153.0-1.hum1. Users should follow Red Hat's guidance for updating these packages via their standard update mechanisms. No additional mitigation beyond applying these official updates is indicated by the vendor advisories.