General Security News (unfiltered)
Scoped Vulnerability Tracking
The most urgent issue is CVE-2026-49261 in MariaDB (grouped under MySQL), a critical 10.0 CVSS vulnerability allowing remote code execution via the `wsrep_notify_cmd` feature when Galera cluster replication is enabled, with no authentication required. This is actively exploited in the wild per CISA KEV, demanding immediate patching or disabling the feature. Additional high-severity vulnerabilities in PostgreSQL, MongoDB, and Redis require attention, including unauthenticated SQL injection in PostgreSQL, memory corruption in MongoDB, and denial-of-service risks in Redis via Netty-based clients.
Summary: MariaDB server versions 10.6.1–10.6.26, 10.11.1–10.11.17, 11.4.1–11.4.11, 11.8.1–11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled execute arbitrary shell commands embedded in joiner node names during cluster replication. Attackers can exploit this remotely without authentication by crafting malicious node names.
Affected Features / Interoperability: Galera cluster replication (`wsrep_notify_cmd` module). Breaks cluster security and enables full system compromise.
Source: GitHub Advisory, Red Hat Errata
Actions:
Summary: Budibase 3.40.0 and earlier enables `multipleStatements: true` in MySQL integration, allowing attackers to inject malicious SQL via user input fields, leading to full database compromise.
Affected Features / Interoperability: Budibase MySQL integration. Compromises application databases and client drivers.
Source: Budibase Release Notes
Actions:
Summary: A namespace editor can exploit the `spec.database.customExtraParams` field in the Data Science Pipelines Operator to inject `LOCAL INFILE` parameters into MySQL DSN strings, enabling file exfiltration and cluster-admin privilege escalation.
Affected Features / Interoperability: Data Science Pipelines Operator MySQL datasource configuration. Risks cluster-wide credential exposure.
Source: Red Hat Errata
Actions:
Summary: Twenty CRM 2.15.0 and earlier allows workspace administrators with `DATA_MODEL` permission to inject arbitrary SQL via `settings.asExpression` in the `searchVector` field, executing commands as the application database user.
Affected Features / Interoperability: Twenty ORM's SQL column definition generation. Compromises application database access.
Source: Twenty Security Advisory
Actions:
Summary: The `DataRow.Decode` function in the pgx driver fails to validate field lengths, allowing malicious PostgreSQL servers to trigger panics via negative field lengths in DataRow messages.
Affected Features / Interoperability: pgx PostgreSQL driver. Causes client-side crashes and potential memory exposure.
Source: Go Vulnerability Database
Actions:
Summary: Sangoma Switchvox 8.3 (104997) has an unauthenticated SQL injection in the `/pa` endpoint, allowing remote attackers to execute arbitrary PostgreSQL queries via XML payloads with unsanitized `PhoneIP` values.
Affected Features / Interoperability: Switchvox XML parsing and PostgreSQL backend. Enables full database compromise and potential RCE.
Source: SRA Labs Analysis
Actions:
Summary: MongoDB Server's intra-cluster authentication mechanism can be manipulated to transmit internal credentials in less-protected forms, enabling credential recovery and cluster-wide compromise.
Affected Features / Interoperability: MongoDB replica set authentication. Risks internal superuser access.
Source: MongoDB JIRA
Actions:
Summary: Timeseries bucket lifecycle handling allows authenticated users with write privileges to trigger use-after-free conditions, potentially leading to server crashes or code execution.
Affected Features / Interoperability: MongoDB timeseries collections. Compromises server stability and security.
Source: MongoDB JIRA
Actions:
Summary: Limited database-scoped roles can drop and recreate protected system collections due to insufficient privilege validation.
Affected Features / Interoperability: MongoDB system collections (e.g., `system.users`). Risks unauthorized privilege escalation.
Source: MongoDB JIRA
Actions:
Summary: Queryable Encryption maintenance operations allow users with access to one encrypted collection to modify/destroy data in other collections via metadata reference flaws.
Affected Features / Interoperability: MongoDB Queryable Encryption. Compromises cross-collection data integrity.
Source: MongoDB JIRA
Actions:
Summary: Authenticated users with write privileges can corrupt timeseries bucket data structures, leading to memory corruption, crashes, or memory disclosure.
Affected Features / Interoperability: MongoDB timeseries collections. Risks server stability and data confidentiality.
Source: MongoDB JIRA
Actions:
Summary: Unauthenticated attackers can crash MongoDB `mongos` routers via malformed aggregation commands, disrupting query routing.
Affected Features / Interoperability: MongoDB aggregation framework and query routing. Causes denial of service.
Source: MongoDB JIRA
Actions:
Summary: Authenticated users with `readWrite` privileges can trigger server crashes or resource exhaustion via malformed Queryable Encryption requests.
Affected Features / Interoperability: MongoDB Queryable Encryption operations. Risks server stability and encrypted index integrity.
Source: MongoDB JIRA
Actions:
Summary: Authenticated users can trigger out-of-bounds memory reads via malformed aggregation pipeline parameters, causing crashes or memory disclosure.
Affected Features / Interoperability: MongoDB aggregation framework. Risks server stability and data confidentiality.
Source: MongoDB JIRA
Actions:
Summary: Authenticated users with write privileges can store malformed geospatial data, leading to memory corruption during queries.
Affected Features / Interoperability: MongoDB geospatial query processing. Risks server stability and memory exposure.
Source: MongoDB JIRA
Actions:
Summary: Authenticated users with read/write privileges can trigger use-after-free conditions in time-series queries, causing crashes or memory disclosure.
Affected Features / Interoperability: MongoDB time-series query execution. Risks server stability and data confidentiality.
Source: MongoDB JIRA
Actions:
Summary: Netty's Redis codec prior to 4.1.135.Final/4.2.15.Final allows DoS via deeply nested Redis arrays, exhausting memory.
Affected Features / Interoperability: Netty-based Redis clients. Causes memory exhaustion and service disruption.
Source: Netty Security Advisory
Actions:
Summary: Netty's Redis codec prior to 4.1.135.Final/4.2.15.Final allows DoS via Redis payloads missing `\r\n`, exhausting direct memory.
Affected Features / Interoperability: Netty-based Redis clients. Causes direct memory exhaustion and connection failures.
Source: Netty Security Advisory
Actions:
Summary: Netty's RedisArrayAggregator leaks pooled direct-memory buffers on pipeline closure, causing gradual memory exhaustion.
Affected Features / Interoperability: Netty-based Redis pipeline connections. Causes memory leaks and eventual OOM errors.
Source: Netty Security Advisory
Actions:
Summary: Netty's RedisArrayAggregator pre-allocates ArrayLists with wire-declared capacities, enabling memory exhaustion via malicious headers.
Affected Features / Interoperability: Netty-based Redis clients. Causes memory exhaustion and DoS.
Source: Netty Security Advisory
Actions:
Summary: Linux kernel KVM fix for ARM64 vgic cleanup prevents resource leaks during vCPU initialization failures.
Affected Features / Interoperability: KVM virtualization on ARM64. Risks resource exhaustion in virtualized environments.
Source: Linux Kernel Stable
Actions:
This week's cloud security landscape is dominated by a cluster of critical Kubernetes privilege-escalation flaws, several of which are actively being exploited in the wild. The single most urgent item is CVE-2026-14450, a confirmed CISA KEV entry affecting the MaaS API in Red Hat OpenShift AI, which allows any pod in the cluster to forge authentication headers and mint ServiceAccount tokens in other tenants' namespaces. This is compounded by CVE-2026-10090, a critical flaw in Red Hat ACM's Application Subscription controller that lets namespace-scoped "edit" users escalate to cluster-admin via crafted Helm charts. Both vulnerabilities enable full cluster compromise and require immediate patching.
Summary: A missing authentication check in Azure Kubernetes Service allows an unauthenticated, network-reachable attacker to elevate privileges. This is a CISA KEV-confirmed vulnerability with active exploitation reported.
Affected Features / Interoperability: Impacts Azure Kubernetes Service (AKS) authentication and authorization mechanisms. Could affect cluster management APIs, node pool operations, and any AAD-integrated workloads relying on AKS-managed identities.
Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50516
Actions:
Summary: A race condition in Azure Attestation service and Device Health Attestation Service allows an unauthorized, network-reachable attacker to execute arbitrary code.
Affected Features / Interoperability: Affects Azure Attestation and Device Health Attestation services. Could impact device enrollment workflows, conditional access policies, and any applications relying on hardware-based attestation for trust decisions.
Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66802
Actions:
Summary: An integer overflow vulnerability in Azure Attestation service and Device Health Attestation Service allows an unauthorized, network-reachable attacker to execute code.
Affected Features / Interoperability: Same as CVE-2026-66802 — impacts Azure Attestation and Device Health Attestation services, affecting device trust and conditional access integrations.
Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71331
Actions:
Summary: In Apache Airflow's Azure Key Vault secrets backend, a team-scoped lookup falls back to a team-agnostic lookup when the team-scoped one misses, allowing cross-team credential exposure in multi-team deployments.
Affected Features / Interoperability: Affects Apache Airflow deployments using the Microsoft Azure provider with multi-team mode enabled. Impacts secret management, CI/CD pipelines, and any workflows relying on Key Vault for credential retrieval.
Source: https://github.com/apache/airflow/pull/70876
Actions:
Summary: An authenticated IDOR vulnerability in the Microsoft Container Migration Solution Accelerator allows users to read, write, and delete processes belonging to other users within the same organization.
Affected Features / Interoperability: Affects the Container Migration Solution Accelerator tool, specifically its process and file management APIs. Could impact migration workflows, data integrity, and user isolation in multi-user scenarios.
Actions:
Summary: A flaw in the MaaS API allows any pod in the cluster to bypass Kuadrant AuthPolicy gateway by forging HTTP headers (`X-MaaS-Username`, `X-MaaS-Group`), enabling privilege escalation and unauthorized access to other tenants' resources.
Affected Features / Interoperability: Impacts MaaS API, Kuadrant AuthPolicy gateway, and any service mesh or API gateway relying on header-based authentication. Could affect tenant isolation, service-to-service communication, and API access controls.
Source: https://access.redhat.com/security/cve/CVE-2026-14450
Actions:
Summary: In Prowler versions prior to 5.36.0, the Kubernetes provider connection test accepts kubeconfig content with legacy GCP auth-provider configurations, allowing arbitrary command execution on the shared worker via subprocess.
Affected Features / Interoperability: Affects Prowler cloud security platform when used with Kubernetes providers. Could impact security scanning workflows, CI/CD pipelines, and any automated compliance checks using Prowler.
Source: https://github.com/prowler-cloud/prowler/security/advisories/GHSA-ccqh-6cjc-wp4j
Actions:
Summary: Missing authentication for critical functions in Azure Kubernetes Service allows an unauthorized, network-reachable attacker to elevate privileges.
Affected Features / Interoperability: Impacts AKS cluster management APIs and authentication mechanisms. Could affect cluster administration, node pool management, and AAD integration.
Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50516
Actions:
Summary: A flaw in Red Hat ACM's Application Subscription controller allows users with namespace-scoped "edit" privileges to create Channel and Subscription resources pointing to malicious Helm repositories, leading to cluster-admin privilege escalation.
Affected Features / Interoperability: Affects Red Hat Advanced Cluster Management (ACM) multicluster-operators-subscription. Impacts cluster lifecycle management, application deployment, and multi-cluster governance.
Source: https://access.redhat.com/security/cve/CVE-2026-10090
Actions:
Summary: A flaw in odh-dashboard (Red Hat OpenShift AI web console) due to incorrect network binding allows in-cluster attackers to bypass authentication and impersonate any user by providing arbitrary access tokens.
Affected Features / Interoperability: Affects the OpenShift AI web console dashboard. Could impact user authentication, session management, and access to AI/ML model deployments.
Source: https://access.redhat.com/security/cve/CVE-2026-16745
Actions:
Summary: The RHOAI training operator overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit` ClusterRole, allowing any user with edit permissions to create, modify, and delete TrainJobs.
Affected Features / Interoperability: Affects Red Hat OpenShift AI training operator and TrainJob resource management. Impacts ML training workflows, job scheduling, and resource allocation.
Source: https://access.redhat.com/security/cve/CVE-2026-18951
Actions:
Summary: A flaw in the RHOAI training-operator allows users with standard edit or admin roles to escalate privileges by creating training jobs that impersonate service accounts, access host filesystems, and execute arbitrary code.
Affected Features /Interoperability: Affects Red Hat OpenShift AI training operator and PodTemplateSpec handling. Impacts ML training jobs, service account usage, and pod security policies.
Source: https://access.redhat.com/security/cve/CVE-2026-18982
Actions:
Summary: The Data Science Pipelines Operator (DSPO) ClusterRole includes excessive permissions such as executing commands in pods and managing cluster-wide roles, which could be exploited if the DSPO pod is compromised.
Affected Features / Interoperability: Affects Red Hat OpenShift AI Data Science Pipelines Operator. Impacts pipeline execution, pod management, and cluster-wide role assignments.
Source: https://access.redhat.com/security/cve/CVE-2026-18608
Actions:
Summary: Improper validation of Kubernetes client certificate renewal in Open Cluster Management allows managed cluster administrators to forge client certificates, enabling cross-cluster privilege escalation.
Affected Features / Interoperability: Affects Open Cluster Management (OCM) and Red Hat Advanced Cluster Management (ACM). Impacts cluster registration, certificate management, and cross-cluster trust relationships.
Source: https://access.redhat.com/security/cve/CVE-2026-4740
Actions:
Summary: The koku-metrics-operator allows users who can edit the CostManagementMetricsConfig custom resource to specify arbitrary upload URLs, which the operator then uses with its own service account token, enabling token theft.
Affected Features / Interoperability: Affects Red Hat OpenShift koku-metrics-operator and cost management metrics collection. Impacts billing data transmission, service account security, and metrics pipeline integrity.
Source: https://access.redhat.com/security/cve/CVE-2026-18381
Actions:
Summary: A Linux kernel vulnerability in the IPv4 raw socket implementation allows unprivileged processes with CAP_NET_RAW to trigger out-of-bounds memory access and kernel panic by sending malformed IP_HDRINCL packets with IHL < 5.
Affected Features / Interoperability: Affects Docker containers running on Linux kernels with CONFIG_USER_NS=y. Impacts container networking, kernel stability, and host-level security.
Source: https://git.kernel.org/stable/c/1065b9efa4126df559b03a849c139ecfae92cd25
Actions:
Summary: A path traversal vulnerability in XAgent's workspace file endpoint allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field.
Affected Features / Interoperability: Affects XAgent application running in Docker containers. Impacts file system security, credential storage, and container isolation boundaries.
Source: https://github.com/OpenBMB/XAgent/commit/26f2b6edc75127af524f027c022b382967178e3a
Actions:
Summary: In regclient versions prior to 0.11.5, credentials for a registry may be leaked to external servers when interacting with malicious registry servers or blob stores that don't restrict external URLs for foreign blobs.
Affected Features / Interoperability: Affects regclient Docker and OCI Registry Client. Impacts container image pulls, registry authentication, and credential management in CI/CD pipelines.
Source: https://github.com/regclient/regclient/security/advisories/GHSA-qvqc-4c52-x6qp
Actions:
Summary: An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
Affected Features / Interoperability: Affects Docker cache management and remote repository handling. Impacts build cache integrity, image layer storage, and repository synchronization.
Source: https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
Actions:
Summary: Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only, leaving the underlying virtio-fs host-edge grant writable, allowing unprivileged code inside the sandbox to write to host directories.
Affected Features / Interoperability: Affects Docker Sandboxes feature and virtio-fs file sharing. Impacts host file system security, container isolation, and shared directory access controls.
Source: https://docs.docker.com/ai/sandboxes/
Actions:
Summary: Dozzle versions 10.5.2 to 10.6.15 have an SSRF vulnerability in the webhook notification URL guard that doesn't inspect IPv4 addresses embedded in 6to4, NAT64, Teredo, or IPv4-compatible IPv6 addresses, allowing authenticated users to reach loopback or link-local targets.
Affected Features / Interoperability: Affects Dozzle log viewer webhook notifications and SSRF protection mechanisms. Impacts log forwarding, notification delivery, and internal service access controls.
Source: https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x
Actions: