Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release
Affects Red HatSource GCVE Database
Not known to be exploited.
Data as of 26 Oct 2026, 06:26 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 0.6% chance of exploitation in 30 days – higher than 52% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 5 Feb 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Red Hat Product Security Red Hat | Affected
| Fixed in– |
AI-suggested
Users should monitor Red Hat advisories for updates. Since this is a resource exhaustion issue triggered by malicious HTTP responses, consider limiting exposure to untrusted or malicious servers and applying network-level controls to restrict communications to trusted endpoints. Engage with Red Hat support or a Technical Account Manager for tailored guidance. Avoid deploying vulnerable versions in high-risk environments until a fix is released.
Description
The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, and 4.20
References
- access.redhat.com/errata/RHSA-2026:2126 (opens in a new tab)
- access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3 (opens in a new tab)
- access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index (opens in a new tab)
- access.redhat.com/security/cve/CVE-2025-66418 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2025-66471 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-21441 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2126.json (opens in a new tab)