RHSA-2026:96291
Vulnerability from csaf_redhat - Published: 2026-11-09 12:53 - Updated: 2026-11-13 15:00Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.3.2 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.3.2 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64 | — |
Vendor Fix
fix
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64 | — |
Threats
Impact
Important
A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs it into go-git's process-global client.Protocols map via gitclient.InstallProtocol("https", ...). Because the worker renders devices for multiple organizations concurrently from a shared goroutine pool, whichever tenant's repository configuration is written last wins for all in-flight git.Clone calls. This race condition can cause one tenant's TLS settings, including InsecureSkipVerify or mTLS client credentials, to leak into another tenant's git operations.
6.6 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service (DoS) by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the application to crash.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64 | — |
Workaround
|
Threats
Impact
Important
References
34 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.3.2 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:96291",
"url": "https://access.redhat.com/errata/RHSA-2026:96291"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102278",
"url": "https://access.redhat.com/security/cve/CVE-2026-102278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92615",
"url": "https://access.redhat.com/security/cve/CVE-2026-92615"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_96291.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.3.2 Security Update",
"tracking": {
"current_release_date": "2026-11-13T15:00:58+00:00",
"generator": {
"date": "2026-11-13T15:00:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.6"
}
},
"id": "RHSA-2026:96291",
"initial_release_date": "2026-11-09T12:53:43+00:00",
"revision_history": [
{
"date": "2026-11-09T12:53:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-09T12:53:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-13T15:00:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.3",
"product": {
"name": "Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.3::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1793975697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1793975835"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel10@sha256%3Aad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1793976137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1793976141"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3Ad2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1793975735"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1793975763"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1793976195"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Aed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1793975710"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3A0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1793975984"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-remote-access-rhel10@sha256%3Aff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-remote-access-rhel10\u0026tag=1793975964"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1793975788"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3A14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1793975611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel10@sha256%3A07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1793975697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3Adbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1793976081"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel10@sha256%3A3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1793976378"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3Af360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1793975697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3Af73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1793975835"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel10@sha256%3A5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1793976137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1793976141"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3A82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1793975735"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1793975763"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1793976195"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3A07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1793975710"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3Acd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1793975984"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-remote-access-rhel10@sha256%3A34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-remote-access-rhel10\u0026tag=1793975964"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1793975788"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3Ab39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1793975611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel10@sha256%3A5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1793975697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3Ad06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1793976081"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel10@sha256%3Acb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1793976378"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-84445",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-14T16:22:17.356407+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "RHBZ#2533175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
"url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
"url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
"url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/issues/9354",
"url": "https://github.com/grpc/grpc-go/issues/9354"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9365",
"url": "https://github.com/grpc/grpc-go/pull/9365"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9366",
"url": "https://github.com/grpc/grpc-go/pull/9366"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9367",
"url": "https://github.com/grpc/grpc-go/pull/9367"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
}
],
"release_date": "2026-09-14T16:11:41.401000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-09T12:53:43+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.3",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:96291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
},
{
"cve": "CVE-2026-92615",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"discovery_date": "2026-07-01T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2518323"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs it into go-git\u0027s process-global client.Protocols map via gitclient.InstallProtocol(\"https\", ...). Because the worker renders devices for multiple organizations concurrently from a shared goroutine pool, whichever tenant\u0027s repository configuration is written last wins for all in-flight git.Clone calls. \nThis race condition can cause one tenant\u0027s TLS settings, including InsecureSkipVerify or mTLS client credentials, to leak into another tenant\u0027s git operations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires a multi-tenant deployment where at least two organizations use git-backed configuration providers concurrently. The attacker must be a fleet administrator (able to create Repository resources with custom TLS settings), must control or operate an external git server to receive misdirected credentials, and must win a race condition with the victim\u0027s concurrent git clone. In single-organization deployments, the attacker already holds the same privileges as the victim, so the race provides no meaningful privilege escalation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92615"
},
{
"category": "external",
"summary": "RHBZ#2518323",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518323"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92615"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92615",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92615"
}
],
"release_date": "2026-09-16T14:34:11.570000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-09T12:53:43+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.3",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:96291"
},
{
"category": "workaround",
"details": "There is no application-level workaround that fully eliminates this race condition without a code change. The following deployment-level measures reduce exposure in multi-tenant environments:\n- Avoid mTLS client certificates for git repositories: If tenant Repository resources do not supply client TLS certificates (httpConfig.tls.clientCertificate), the most sensitive data (client private key material) is absent from the global transport and cannot leak.\n- Avoid skipServerVerification: Do not set httpConfig.skipServerVerification: true on any Repository resource. This prevents a tenant\u0027s InsecureSkipVerify=true from propagating to other tenants\u0027 clones, which would otherwise allow an on-path attacker to serve malicious configuration.",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed"
},
{
"cve": "CVE-2026-102278",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-28T21:00:55.949756+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542700"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service (DoS) by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because remote unauthenticated attackers can supply crafted nested expressions to trigger native stack exhaustion and crash server-side processes, resulting in a denial of service without compromising system confidentiality or integrity. In Red Hat environments, the affected library is distributed across containerized web consoles, developer tools, and Node.js runtime environments. Exploitation is constrained to deployments where applications process untrusted, user-defined pattern inputs directly through expansion functions without input depth validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102278"
},
{
"category": "external",
"summary": "RHBZ#2542700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542700"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102278"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b",
"url": "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c",
"url": "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db",
"url": "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7",
"url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7"
}
],
"release_date": "2026-09-28T20:57:09.850000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-09T12:53:43+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.3",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:96291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:767c7b0e62006634c965d28f47309e84711ebafabf896eb4de45b2ef48d72878_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:f360570fd419bdd3310c343025bd5981eb6ef47d8a4715b84e90fc781484fc95_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:34463a518d5607c98abc50614dc871b2a30b7511b7eaa276e8f2277d2f38dd91_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:f73ec9012448971d68d2d316df5d82a9c3d95a5b7524453e4920b76a323be849_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:5e4e23db8ba04dd39543c8b419c119915ff95960f060ef2ba3a00b2025e5e41f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:ad6bcbc8167501b8f215faac0d50e267eb25177b7a5d9adab38d927d4f248965_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:10b0f4569e367426c7c581829f1e776bf9affba3bb558bc71b6c1ee80d4a584e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:2665f51f429d2a96a0deac310a7f3173505731659c618e8e39236ecd6b73174f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:82e4dd56b5411f1e40fabc0a1ea09073886d1603144b9b62df2c853e85f16431_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d2de4a2f0c4c5fc6fb6397dbcf93c03b7f893482b52a41fa3fe813f3e741f957_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:45871021490932eec96aea7883c1453c3a05b227d45d38813f03c8dd37d47a1d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:71711ee05238a071305830c33be9b78842547d0688c84ffca598940e8b3d3094_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:7b7c0ab8cb03d31a11ed2df7e903f3db05d0a1f3235bc40972c50c31e76caa11_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:959f962e5152c06717b3e2d2317835d98388bbed78ff6fec6a106b1ad19cef30_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:07fd3cc0f32daa0498f95ebc7f2912c268702910829676a343547dc56d34818f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ed1f184e39a4b173e3605aea111495c2fefe12c929bd417699c19358d081c8fd_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:0c2a477b6d3ba98a3845d618272f4a3f79bae202859daab1e4f7e6ad2937c764_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:cd4cf1d22bc2428d0465892d7268c5132b8226a6cedf5dce2f80a6512cf02aa7_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:34f38dd0b3f4f0d50a4772240beb4d7516f64bd300687fd6e70b21e95280621a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel10@sha256:ff6bb2ba6b2bf074bdf59a88ed1cb7013ec7a411ff05f801e21441c82e9e1cf2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:4c4afef4352addcf10f90cd7a997080f696087dec0600c1551c38ef60ea85a31_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5344730451c85a416faeb082c78890d60830c403edef911b40b87029dbac711a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:14027bd88e93e95657040b3a130ed823d8db0426f47620754c48eec0538c026a_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:b39ec452f5343266577fbb243f70849b486110efb77bd2dc24038410d0b2c3eb_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:07a89498a9ab091182648aef9b78af48f796bf1f1b937cea929a38500b0d463f_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:5df8327da0358648c44bb2fdefa2ff46f2e5d1b2d4a63451c1a02ace3760e9ad_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:d06b5e100831b101474e88083afc701efcf6f986b8cbf6c4cecce09bedac4e0d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:dbcaac6f6c30286a3f94ca3f14a58130dc3cf2623b4edd95128028378335c330_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:3805bba70d0aa4c9ea4534effcbf5e50a496907609bfc668d8e320abb2351b0d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:cb667404880a361474821a91ce1ebef46e0df6d6390d26290a8ec48f3711eadc_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.