This advisory concerns a vulnerability tracked as CVE-2026-41506 affecting the syft RPMs included in Red Hat Hardened Images. The vulnerability is classified under CWE-601, indicating an open redirect issue. Red Hat released updated RPMs (syft-1.44.0-0.3.hum1) for aarch64 and x86_64 architectures to address this issue. The advisory does not provide a CVSS score or detailed technical impact but confirms the availability of a fixed package. There are no known exploits in the wild at the time of publication.

The vulnerability involves an open redirect (CWE-601), which can potentially be used to redirect users to malicious sites if exploited. However, no active exploitation has been reported. The impact is considered medium severity by Red Hat, reflecting moderate risk without confirmed exploitation or critical impact details.

A fixed version of the syft RPM (1.44.0-0.3.hum1) is available for affected architectures (aarch64 and x86_64). Users should apply this update as provided by Red Hat to remediate the vulnerability. Refer to the official Red Hat advisory and update channels for instructions on applying the patch. No additional mitigations or workarounds are indicated by the vendor.