Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This security advisory from Red Hat addresses a high severity vulnerability identified as CVE-2026-93450 affecting the prometheus3.13 RPM packages within Red Hat Hardened Images. The update includes prometheus3.13-3.13.3-0.2.hum1 packages for aarch64 and x86_64 architectures. The vulnerability is related to CWE-78, which typically involves OS command injection or improper neutralization of special elements used in commands. The advisory references multiple CVEs (CVE-2026-93450, CVE-2026-102422, CVE-2026-56851) but focuses on the prometheus3.13 update. The vendor advisory does not explicitly state the patch availability or remediation level, nor does it mention active exploitation in the wild.

The vulnerability is rated high severity and relates to a security flaw in the prometheus3.13 RPM packages within Red Hat Hardened Images. The CWE-78 classification suggests potential command injection risks, which could allow an attacker to execute arbitrary commands. However, no details on exploitation or impact scenarios are provided in the advisory.

The vendor advisory indicates an update is available for prometheus3.13 packages (version 3.13.3-0.2.hum1) that addresses the vulnerability. Users should apply this update to mitigate the issue. Patch status is not explicitly confirmed beyond the availability of updated packages; therefore, users should consult the official Red Hat advisory at https://access.redhat.com/errata/RHSA-2026:72750 for detailed remediation instructions.