In Eclipse Jetty, the JASPIAuthenticator sets two ThreadLocal variables during authentication checks. Under certain conditions, an early return from the authentication code occurs without clearing these ThreadLocal variables. As a result, subsequent requests processed by the same thread inherit these stale ThreadLocal values, causing broken access control and privilege escalation risks. The vulnerability is tracked as CVE-2026-5795 and affects multiple versions of Eclipse Jetty, including 9.4.0 through 12.1.0. Red Hat's advisory (RHSA-2026:28573) includes this fix as part of a security update for the Red Hat Offline Knowledge Portal container image.

The vulnerability allows broken access control and privilege escalation due to improper clearing of sensitive ThreadLocal data in the authentication process. This can lead to unauthorized access if a subsequent request inherits authentication state from a previous request on the same thread. The CVSS 3.1 score of 7.4 reflects high confidentiality and integrity impact without availability impact.

Red Hat has released a security update for the Offline Knowledge Portal container image that addresses CVE-2026-5795. Users should update to the latest container image available from the Red Hat container registry using the 'podman pull' command as described in the advisory RHSA-2026:28573. No other mitigation or temporary fix is detailed in the advisory. Patch status beyond this container update is not explicitly confirmed; users should consult the vendor advisory for the latest remediation guidance.