Red Hat Red Hat Advanced Cluster Security 4 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Red Hat Red Hat Advanced Cluster Security 4: 6 record(s), with affected versions and fixes.

CVE-2026-19519 Medium · 4.3 CWE-617 Aug 11, 2026

Claircore: claircore: denial of service via unchecked type assertion in rpm header parser

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service.

CVE-2026-19278 Medium · 6.8 CWE-625 Aug 10, 2026

Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings

A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange. When an administrator configures M2M role mappings, the system uses unanchored regular expressions for matching claim values. This allows an attacker with a valid OpenID Connect (OIDC) token, whose claim value is a superstring of a configured pattern, to gain unauthorized access to roles they were not intended to receive. This can lead to privilege escalation within the system.

CVE-2026-10079 High · 8.5 CWE-345 Jul 31, 2026

Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causing ACS to treat the workload as having empty UID, name and labels and namespace "default". This bypasses deploy-time policy detection and enforcement visibility, prevents correct persistence in Central and breaks violation reporting and compliance correlation for the affected deployment.

CVE-2026-16254 Medium · 4.3 CWE-125 Jul 20, 2026

Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser

A flaw was found in claircore's apk package scanner. Malformed package-database data in a container layer can cause an out-of-bounds access that panics the scanner. If that panic is not recovered, the Clair indexer process can crash, leading to a denial of service.

CVE-2026-9165 High · 7.7 CWE-400 Jul 6, 2026

Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.

CVE-2025-11065 Medium · 5.3 CWE-209 Jan 26, 2026

Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.