Threats Tagged 'cve-2026-71467'

Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which add new features and enhancements, bug fixes, and updated container images. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.17/html-single/release_notes/index#acm-release-notes

CVE-2026-71467 is a high-severity authentication bypass vulnerability in Red Hat Advanced Cluster Management for Kubernetes 2.17. The flaw exists in the search-v2-api component, where authentication is skipped if the HTTP request includes an 'Upgrade: websocket' header. An unauthenticated attacker can exploit this by sending a crafted POST request to the /federated endpoint, gaining unauthorized access to federated search results across all configured remote managed hubs, resulting in information disclosure. The FEATURE_FEDERATED_SEARCH is enabled by default in Global Hub deployments, increasing exposure risk. Mitigation involves disabling this feature if unused or restricting network access to trusted clients for the /federated endpoint.

A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an `Upgrade: websocket` header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the `/federated` endpoint with the `Upgrade: websocket` header. This allows the attacker to bypass authentication and access federated search results across all configured remote managed hubs, leading to information disclosure.