Red Hat Security Advisory: RHACS 4.11.5 security and bug fix update

The Red Hat Security Advisory RHSA-2026:79575 announces the release of RHACS 4.11.5, which includes security patches and bug fixes. The update addresses vulnerabilities identified as CVE-2026-84304 and CVE-2026-84445, related to issues categorized under CWE-770 (Allocation of Resources Without Limits or Throttling) and CWE-125 (Out-of-bounds Read). The advisory does not provide detailed technical descriptions of the vulnerabilities but directs users to the release notes for specifics. The update also fixes a permissions issue (ROX-33402) related to report creation requiring Workflow Administration "write" permission. The advisory strongly recommends upgrading to this version to mitigate the identified issues.

The vulnerabilities addressed in this update are rated as high severity. They involve potential resource allocation and memory handling issues that could affect the security and stability of RHACS deployments. The permissions fix improves access control for report creation within the system. No known exploits are reported in the wild at this time.

Red Hat advises users running earlier versions of RHACS to upgrade to version 4.11.5 to apply the security patches and bug fixes. No additional mitigation steps are specified beyond upgrading. Users should consult the official Red Hat release notes and advisory for detailed upgrade instructions and to verify the applicability of the update to their environment.