This Red Hat security advisory (RHSA-2026:29012) addresses multiple vulnerabilities affecting Red Hat Hardened Images RPMs, particularly nodejs24 and associated packages. The vulnerabilities include issues categorized under CWE-209 (Information Exposure Through an Error Message), CWE-289 (Authentication Bypass), and CWE-770 (Allocation of Resources Without Limits or Throttling). The advisory lists updated RPMs with version 24.18.0-0.1.hum1 and related packages for aarch64 and x86_64 architectures. While no explicit CVSS scores or detailed technical exploit descriptions are provided, the update is marked with high severity. The advisory references three CVEs: CVE-2026-48615, CVE-2026-48618, and CVE-2026-48933. No known exploits in the wild have been reported. The vendor advisory directs users to apply the update via Red Hat Hardened Images infrastructure.

The vulnerabilities addressed involve potential information exposure, authentication bypass, and resource allocation issues in Red Hat Hardened Images RPMs, specifically nodejs24 packages. These could allow attackers to gain unauthorized access or cause denial of service conditions if exploited. However, no known exploits in the wild have been reported at this time. The severity is classified as high, indicating significant potential impact if exploited.

Red Hat has released updated RPM packages for nodejs24 and related components as part of the Hardened Images update. Users should apply these updates promptly by following the instructions provided at https://images.redhat.com/. Since this is an official Red Hat security advisory with an update available, applying the vendor-provided update is the recommended remediation. No additional mitigation steps are indicated in the advisory.