RHSA-2026:94632
Vulnerability from csaf_redhat - Published: 2026-11-03 18:24 - Updated: 2026-11-13 15:00Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.2.2 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Security Fixes:
* flightctl: gRPC-Go: Denial of Service via malformed RPC requests (CVE-2026-84445)
* flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed (CVE-2026-92615)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64 | — |
Threats
Impact
Important
A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs it into go-git's process-global client.Protocols map via gitclient.InstallProtocol("https", ...). Because the worker renders devices for multiple organizations concurrently from a shared goroutine pool, whichever tenant's repository configuration is written last wins for all in-flight git.Clone calls. This race condition can cause one tenant's TLS settings, including InsecureSkipVerify or mTLS client credentials, to leak into another tenant's git operations.
6.6 (Medium)
Affected products
Fixed
18 products, the same list as for
CVE-2026-84445
Known not affected
18 products, the same list as for
CVE-2026-84445
Threats
Impact
Moderate
References
23 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.2.2 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\nRed Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\nRed Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.\n\nSecurity Fixes: \n\n* flightctl: gRPC-Go: Denial of Service via malformed RPC requests (CVE-2026-84445)\n* flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed (CVE-2026-92615)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:94632",
"url": "https://access.redhat.com/errata/RHSA-2026:94632"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2518323",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518323"
},
{
"category": "external",
"summary": "2533175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_94632.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update",
"tracking": {
"current_release_date": "2026-11-13T15:00:54+00:00",
"generator": {
"date": "2026-11-13T15:00:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.6"
}
},
"id": "RHSA-2026:94632",
"initial_release_date": "2026-11-03T18:24:49+00:00",
"revision_history": [
{
"date": "2026-11-03T18:24:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-03T18:24:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-13T15:00:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEM 1.2 for RHEL 10",
"product": {
"name": "RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.2::el10"
}
}
},
{
"category": "product_name",
"name": "RHEM 1.2 for RHEL 9",
"product": {
"name": "RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-0:1.2.2-1.el10.src",
"product": {
"name": "flightctl-0:1.2.2-1.el10.src",
"product_id": "flightctl-0:1.2.2-1.el10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.2.2-1.el10?arch=src"
}
}
},
{
"category": "product_version",
"name": "flightctl-0:1.2.2-1.el9.src",
"product": {
"name": "flightctl-0:1.2.2-1.el9.src",
"product_id": "flightctl-0:1.2.2-1.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.2.2-1.el9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.2.2-1.el10.x86_64",
"product": {
"name": "flightctl-agent-0:1.2.2-1.el10.x86_64",
"product_id": "flightctl-agent-0:1.2.2-1.el10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.2.2-1.el10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.2.2-1.el10.x86_64",
"product": {
"name": "flightctl-cli-0:1.2.2-1.el10.x86_64",
"product_id": "flightctl-cli-0:1.2.2-1.el10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.2.2-1.el10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.2.2-1.el10.x86_64",
"product": {
"name": "flightctl-observability-0:1.2.2-1.el10.x86_64",
"product_id": "flightctl-observability-0:1.2.2-1.el10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.2.2-1.el10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.2.2-1.el10.x86_64",
"product": {
"name": "flightctl-services-0:1.2.2-1.el10.x86_64",
"product_id": "flightctl-services-0:1.2.2-1.el10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.2.2-1.el10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.2.2-1.el9.x86_64",
"product": {
"name": "flightctl-agent-0:1.2.2-1.el9.x86_64",
"product_id": "flightctl-agent-0:1.2.2-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.2.2-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.2.2-1.el9.x86_64",
"product": {
"name": "flightctl-cli-0:1.2.2-1.el9.x86_64",
"product_id": "flightctl-cli-0:1.2.2-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.2.2-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.2.2-1.el9.x86_64",
"product": {
"name": "flightctl-observability-0:1.2.2-1.el9.x86_64",
"product_id": "flightctl-observability-0:1.2.2-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.2.2-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.2.2-1.el9.x86_64",
"product": {
"name": "flightctl-services-0:1.2.2-1.el9.x86_64",
"product_id": "flightctl-services-0:1.2.2-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.2.2-1.el9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.2.2-1.el10.s390x",
"product": {
"name": "flightctl-agent-0:1.2.2-1.el10.s390x",
"product_id": "flightctl-agent-0:1.2.2-1.el10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.2.2-1.el10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.2.2-1.el10.s390x",
"product": {
"name": "flightctl-cli-0:1.2.2-1.el10.s390x",
"product_id": "flightctl-cli-0:1.2.2-1.el10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.2.2-1.el10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.2.2-1.el10.s390x",
"product": {
"name": "flightctl-observability-0:1.2.2-1.el10.s390x",
"product_id": "flightctl-observability-0:1.2.2-1.el10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.2.2-1.el10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.2.2-1.el10.s390x",
"product": {
"name": "flightctl-services-0:1.2.2-1.el10.s390x",
"product_id": "flightctl-services-0:1.2.2-1.el10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.2.2-1.el10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.2.2-1.el9.s390x",
"product": {
"name": "flightctl-agent-0:1.2.2-1.el9.s390x",
"product_id": "flightctl-agent-0:1.2.2-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.2.2-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.2.2-1.el9.s390x",
"product": {
"name": "flightctl-cli-0:1.2.2-1.el9.s390x",
"product_id": "flightctl-cli-0:1.2.2-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.2.2-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.2.2-1.el9.s390x",
"product": {
"name": "flightctl-observability-0:1.2.2-1.el9.s390x",
"product_id": "flightctl-observability-0:1.2.2-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.2.2-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.2.2-1.el9.s390x",
"product": {
"name": "flightctl-services-0:1.2.2-1.el9.s390x",
"product_id": "flightctl-services-0:1.2.2-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.2.2-1.el9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.2.2-1.el10.ppc64le",
"product": {
"name": "flightctl-agent-0:1.2.2-1.el10.ppc64le",
"product_id": "flightctl-agent-0:1.2.2-1.el10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.2.2-1.el10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.2.2-1.el10.ppc64le",
"product": {
"name": "flightctl-cli-0:1.2.2-1.el10.ppc64le",
"product_id": "flightctl-cli-0:1.2.2-1.el10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.2.2-1.el10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.2.2-1.el10.ppc64le",
"product": {
"name": "flightctl-observability-0:1.2.2-1.el10.ppc64le",
"product_id": "flightctl-observability-0:1.2.2-1.el10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.2.2-1.el10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.2.2-1.el10.ppc64le",
"product": {
"name": "flightctl-services-0:1.2.2-1.el10.ppc64le",
"product_id": "flightctl-services-0:1.2.2-1.el10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.2.2-1.el10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.2.2-1.el9.ppc64le",
"product": {
"name": "flightctl-agent-0:1.2.2-1.el9.ppc64le",
"product_id": "flightctl-agent-0:1.2.2-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.2.2-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.2.2-1.el9.ppc64le",
"product": {
"name": "flightctl-cli-0:1.2.2-1.el9.ppc64le",
"product_id": "flightctl-cli-0:1.2.2-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.2.2-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.2.2-1.el9.ppc64le",
"product": {
"name": "flightctl-observability-0:1.2.2-1.el9.ppc64le",
"product_id": "flightctl-observability-0:1.2.2-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.2.2-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.2.2-1.el9.ppc64le",
"product": {
"name": "flightctl-services-0:1.2.2-1.el9.ppc64le",
"product_id": "flightctl-services-0:1.2.2-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.2.2-1.el9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.2.2-1.el10.aarch64",
"product": {
"name": "flightctl-agent-0:1.2.2-1.el10.aarch64",
"product_id": "flightctl-agent-0:1.2.2-1.el10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.2.2-1.el10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.2.2-1.el10.aarch64",
"product": {
"name": "flightctl-cli-0:1.2.2-1.el10.aarch64",
"product_id": "flightctl-cli-0:1.2.2-1.el10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.2.2-1.el10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.2.2-1.el10.aarch64",
"product": {
"name": "flightctl-observability-0:1.2.2-1.el10.aarch64",
"product_id": "flightctl-observability-0:1.2.2-1.el10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.2.2-1.el10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.2.2-1.el10.aarch64",
"product": {
"name": "flightctl-services-0:1.2.2-1.el10.aarch64",
"product_id": "flightctl-services-0:1.2.2-1.el10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.2.2-1.el10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.2.2-1.el9.aarch64",
"product": {
"name": "flightctl-agent-0:1.2.2-1.el9.aarch64",
"product_id": "flightctl-agent-0:1.2.2-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.2.2-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.2.2-1.el9.aarch64",
"product": {
"name": "flightctl-cli-0:1.2.2-1.el9.aarch64",
"product_id": "flightctl-cli-0:1.2.2-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.2.2-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.2.2-1.el9.aarch64",
"product": {
"name": "flightctl-observability-0:1.2.2-1.el9.aarch64",
"product_id": "flightctl-observability-0:1.2.2-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.2.2-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.2.2-1.el9.aarch64",
"product": {
"name": "flightctl-services-0:1.2.2-1.el9.aarch64",
"product_id": "flightctl-services-0:1.2.2-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.2.2-1.el9?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-selinux-0:1.2.2-1.el10.noarch",
"product": {
"name": "flightctl-selinux-0:1.2.2-1.el10.noarch",
"product_id": "flightctl-selinux-0:1.2.2-1.el10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.2.2-1.el10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "flightctl-selinux-0:1.2.2-1.el9.noarch",
"product": {
"name": "flightctl-selinux-0:1.2.2-1.el9.noarch",
"product_id": "flightctl-selinux-0:1.2.2-1.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.2.2-1.el9?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.2.2-1.el10.src as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src"
},
"product_reference": "flightctl-0:1.2.2-1.el10.src",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.2.2-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64"
},
"product_reference": "flightctl-agent-0:1.2.2-1.el10.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.2.2-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le"
},
"product_reference": "flightctl-agent-0:1.2.2-1.el10.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.2.2-1.el10.s390x as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x"
},
"product_reference": "flightctl-agent-0:1.2.2-1.el10.s390x",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.2.2-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64"
},
"product_reference": "flightctl-agent-0:1.2.2-1.el10.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.2.2-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64"
},
"product_reference": "flightctl-cli-0:1.2.2-1.el10.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.2.2-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le"
},
"product_reference": "flightctl-cli-0:1.2.2-1.el10.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.2.2-1.el10.s390x as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x"
},
"product_reference": "flightctl-cli-0:1.2.2-1.el10.s390x",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.2.2-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64"
},
"product_reference": "flightctl-cli-0:1.2.2-1.el10.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.2.2-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64"
},
"product_reference": "flightctl-observability-0:1.2.2-1.el10.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.2.2-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le"
},
"product_reference": "flightctl-observability-0:1.2.2-1.el10.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.2.2-1.el10.s390x as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x"
},
"product_reference": "flightctl-observability-0:1.2.2-1.el10.s390x",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.2.2-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64"
},
"product_reference": "flightctl-observability-0:1.2.2-1.el10.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.2.2-1.el10.noarch as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch"
},
"product_reference": "flightctl-selinux-0:1.2.2-1.el10.noarch",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.2.2-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64"
},
"product_reference": "flightctl-services-0:1.2.2-1.el10.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.2.2-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le"
},
"product_reference": "flightctl-services-0:1.2.2-1.el10.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.2.2-1.el10.s390x as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x"
},
"product_reference": "flightctl-services-0:1.2.2-1.el10.s390x",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.2.2-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10",
"product_id": "10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64"
},
"product_reference": "flightctl-services-0:1.2.2-1.el10.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.2.2-1.el9.src as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src"
},
"product_reference": "flightctl-0:1.2.2-1.el9.src",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.2.2-1.el9.aarch64 as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64"
},
"product_reference": "flightctl-agent-0:1.2.2-1.el9.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.2.2-1.el9.ppc64le as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le"
},
"product_reference": "flightctl-agent-0:1.2.2-1.el9.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.2.2-1.el9.s390x as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x"
},
"product_reference": "flightctl-agent-0:1.2.2-1.el9.s390x",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.2.2-1.el9.x86_64 as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64"
},
"product_reference": "flightctl-agent-0:1.2.2-1.el9.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.2.2-1.el9.aarch64 as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64"
},
"product_reference": "flightctl-cli-0:1.2.2-1.el9.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.2.2-1.el9.ppc64le as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le"
},
"product_reference": "flightctl-cli-0:1.2.2-1.el9.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.2.2-1.el9.s390x as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x"
},
"product_reference": "flightctl-cli-0:1.2.2-1.el9.s390x",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.2.2-1.el9.x86_64 as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64"
},
"product_reference": "flightctl-cli-0:1.2.2-1.el9.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.2.2-1.el9.aarch64 as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64"
},
"product_reference": "flightctl-observability-0:1.2.2-1.el9.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.2.2-1.el9.ppc64le as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le"
},
"product_reference": "flightctl-observability-0:1.2.2-1.el9.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.2.2-1.el9.s390x as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x"
},
"product_reference": "flightctl-observability-0:1.2.2-1.el9.s390x",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.2.2-1.el9.x86_64 as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64"
},
"product_reference": "flightctl-observability-0:1.2.2-1.el9.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.2.2-1.el9.noarch as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch"
},
"product_reference": "flightctl-selinux-0:1.2.2-1.el9.noarch",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.2.2-1.el9.aarch64 as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64"
},
"product_reference": "flightctl-services-0:1.2.2-1.el9.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.2.2-1.el9.ppc64le as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le"
},
"product_reference": "flightctl-services-0:1.2.2-1.el9.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.2.2-1.el9.s390x as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x"
},
"product_reference": "flightctl-services-0:1.2.2-1.el9.s390x",
"relates_to_product_reference": "9Base-RHEM-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.2.2-1.el9.x86_64 as a component of RHEM 1.2 for RHEL 9",
"product_id": "9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64"
},
"product_reference": "flightctl-services-0:1.2.2-1.el9.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-84445",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-14T16:22:17.356407+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "RHBZ#2533175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
"url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
"url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
"url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/issues/9354",
"url": "https://github.com/grpc/grpc-go/issues/9354"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9365",
"url": "https://github.com/grpc/grpc-go/pull/9365"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9366",
"url": "https://github.com/grpc/grpc-go/pull/9366"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9367",
"url": "https://github.com/grpc/grpc-go/pull/9367"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
}
],
"release_date": "2026-09-14T16:11:41.401000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-03T18:24:49+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
"product_ids": [
"10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94632"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
},
{
"cve": "CVE-2026-92615",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"discovery_date": "2026-07-01T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2518323"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs it into go-git\u0027s process-global client.Protocols map via gitclient.InstallProtocol(\"https\", ...). Because the worker renders devices for multiple organizations concurrently from a shared goroutine pool, whichever tenant\u0027s repository configuration is written last wins for all in-flight git.Clone calls. \nThis race condition can cause one tenant\u0027s TLS settings, including InsecureSkipVerify or mTLS client credentials, to leak into another tenant\u0027s git operations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires a multi-tenant deployment where at least two organizations use git-backed configuration providers concurrently. The attacker must be a fleet administrator (able to create Repository resources with custom TLS settings), must control or operate an external git server to receive misdirected credentials, and must win a race condition with the victim\u0027s concurrent git clone. In single-organization deployments, the attacker already holds the same privileges as the victim, so the race provides no meaningful privilege escalation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92615"
},
{
"category": "external",
"summary": "RHBZ#2518323",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518323"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92615"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92615",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92615"
}
],
"release_date": "2026-09-16T14:34:11.570000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-03T18:24:49+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
"product_ids": [
"10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94632"
},
{
"category": "workaround",
"details": "There is no application-level workaround that fully eliminates this race condition without a code change. The following deployment-level measures reduce exposure in multi-tenant environments:\n- Avoid mTLS client certificates for git repositories: If tenant Repository resources do not supply client TLS certificates (httpConfig.tls.clientCertificate), the most sensitive data (client private key material) is absent from the global transport and cannot leak.\n- Avoid skipServerVerification: Do not set httpConfig.skipServerVerification: true on any Repository resource. This prevents a tenant\u0027s InsecureSkipVerify=true from propagating to other tenants\u0027 clones, which would otherwise allow an on-path attacker to serve malicious configuration.",
"product_ids": [
"10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.2:flightctl-0:1.2.2-1.el10.src",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el10.x86_64",
"10Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el10.noarch",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.aarch64",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.ppc64le",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.s390x",
"10Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el10.x86_64",
"9Base-RHEM-1.2:flightctl-0:1.2.2-1.el9.src",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-agent-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-cli-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-observability-0:1.2.2-1.el9.x86_64",
"9Base-RHEM-1.2:flightctl-selinux-0:1.2.2-1.el9.noarch",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.aarch64",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.ppc64le",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.s390x",
"9Base-RHEM-1.2:flightctl-services-0:1.2.2-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.