Threats affecting pkg:github/assisted-migration-agent

CVE-2026-53476 is a critical path traversal vulnerability in the assisted-migration-agent component. An unauthenticated attacker on the same LAN can craft a malicious gzipped tarball to bypass security checks and write arbitrary files, potentially leading to unauthorized code execution on the appliance. Red Hat has assessed that this vulnerability does not affect any currently supported Red Hat products.

CVE-2026-53475 is a critical vulnerability in the assisted-migration-agent application caused by improper TLS certificate validation when communicating with vCenter. This flaw allows a Man-in-the-Middle (MITM) attacker to intercept and steal vCenter administrator credentials, potentially leading to unauthorized access to vCenter environments. The vulnerability has a CVSS score of 9.3. According to the vendor advisory, this issue does not affect any currently supported Red Hat products. No specific affected versions or patches are detailed in the advisory at this time.