Skip to main content
CVE-2026-1965VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat AI Base Images 3.4.8 (TPU)

Affects Red HatSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited · fixed in Red Hat package updates : patch Red Hat soon.

Data as of 13 Nov 2026, 15:02 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in 8.21.0

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 11 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 13 Nov 2026.

What to do

AI-suggested

A fix is available in libcurl version 8.21.0. Users should upgrade to this version or later to remediate the vulnerability. If upgrading is not immediately possible, applications should avoid reusing the same libcurl easy handle for transfers to different HTTP origins when using Digest authentication, or explicitly clear authentication-related state before reuse. No other mitigations meet Red Hat's criteria for ease of use and applicability.

Description

A vulnerability exists in libcurl used by Red Hat AI Base Images 3.4.8 (TPU) involving incorrect reuse of Digest authentication headers across different HTTP origins. This flaw can cause the authentication header intended for one origin to be sent to another, potentially disclosing sensitive authentication state. The issue affects libcurl versions from 7.10.6 up to 8.20.0 and is fixed in version 8.21.0. The vulnerability requires a specific programming pattern of reusing the same libcurl handle across different HTTP origins with Digest authentication. No exploits are known in the wild, and the impact is limited to information disclosure of authenticated state, not credentials themselves.

References

Community reviews

Loading reviews…