Stored XSS in tablib's HTML export path before version 3.10.0 allows an authenticated attacker to inject arbitrary JavaScript via maliciously named worksheet titles sourced from imported XLSX, ODS, XLS, or YAML files. The export_book method in _html.py previously interpolated dataset titles directly into HTML h3 tags using an f-string, bypassing all escaping; script payloads assigned to the Dataset title attribute execute in a victim's browser when the exported HTML is rendered. No active exploitation confirmed in CISA KEV; vendor-released patch is available as v3.10.0.
IP-based access restriction bypass in GitLab Enterprise Edition exposes private project merge request metadata to authenticated users who would otherwise be blocked by network-level controls. Affecting all EE versions from 12.0 up to 19.0.6, 19.1.4, and 19.2.2, the flaw stems from a missing authorization check in a merge requests API endpoint that fails to enforce configured IP allowlists. A publicly available exploit exists via HackerOne, and while the confidentiality impact is scoped to limited merge request information, the bypass of a deliberate security boundary elevates practical risk for organizations relying on IP restrictions as a compensating control.
Missing RBAC middleware on Budibase's GET /api/global/groups API endpoint allows any authenticated BASIC-role user to enumerate all tenant groups, role-to-application mappings, member user lists, builder permission flags, and default-group designations that should be restricted to builders and administrators. All Budibase versions prior to 3.39.25 are affected across both self-hosted and cloud deployments. No active exploitation is confirmed in CISA KEV, but a complete proof-of-concept with Docker-based reproduction steps is publicly disclosed in GitHub Security Advisory GHSA-4qcj-m5wp-jmf4, reducing exploitation effort to near zero for any tenant user with a valid session.
Unauthorized disclosure of external status check configuration in GitLab Enterprise Edition allows any authenticated user holding a developer-role to read merge request API data that should be restricted to higher-privileged roles (maintainer or owner), due to a missing authorization check on the affected endpoint. Versions spanning 16.0 through 19.2.x are affected across a wide installation base. A publicly available proof-of-concept was disclosed via HackerOne (report #3622861), and GitLab has confirmed and remediated the issue; no confirmed active exploitation (CISA KEV) has been reported at time of analysis.
Incorrect authorization in GitLab Enterprise Edition's GraphQL layer allows authenticated users to read policy configurations belonging to namespaces they have no authorized access to. Affected versions span GitLab EE 19.1 before 19.1.4 and 19.2 before 19.2.2. A publicly available proof-of-concept exploit exists (HackerOne report #3776182), though no active exploitation has been confirmed by CISA KEV, making this a medium-severity information disclosure risk for organizations running GitLab EE at affected patch levels.
Package registry metadata modification in GitLab CE/EE exposes an improper authorization flaw (CWE-863) that permits authenticated developer-role users to alter package registry metadata normally restricted to maintainers, across all instances running versions 17.6 through 19.2.1. A publicly available exploit has been disclosed via HackerOne (report 3598070), making this immediately actionable for insider or contractor threat scenarios. No active exploitation has been confirmed by CISA KEV, but the combination of wide version range, broad GitLab deployment footprint, and public exploit code elevates practical risk beyond the moderate CVSS 4.3 score alone.
Out-of-bounds write in Zephyr RTOS's llext subsystem allows a local attacker with low privileges to corrupt supervisor-context memory by loading a crafted relocatable ELF extension on Xtensa targets. The vulnerability in llext_link_plt() (subsys/llext/llext_link.c) occurs before any extension code executes - at link time - meaning sandbox protections are bypassed entirely. Exploitation complexity is high (CVSS AC:H) due to constraints on the write value, no public exploit code or CISA KEV listing exists at time of analysis, and impact is confined to deployments using llext on Xtensa architecture.
Kernel information disclosure and local denial of service affect Zephyr RTOS on Intel ALH-equipped hardware through an unvalidated stream_id parameter in the Intel ALH digital-audio-interface driver. A local user-mode thread holding explicit ALH device-object access can invoke the dai_get_properties_copy() syscall with an arbitrary stream_id, triggering an out-of-bounds read from the fixed 64-entry alh_handshake_map[] array and leaking one byte of kernel memory per call, along with a computed FIFO register address that can expose kernel address-space layout. No public exploit has been identified at time of analysis; exploitation is constrained to systems built with CONFIG_USERSPACE and where device-object access has been deliberately granted to untrusted threads.
Authentication bypass in SiYuan's publish layer exposes password-protected attribute view data to unauthenticated remote users across all versions before v3.7.4. The FilterViewByPublishAccess filter omits its password enforcement on the renderAttributeView code path, allowing arbitrary callers to retrieve structured database rows - including document titles, block IDs, and column values - from documents the owner intended to gate with a publish password. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis; vendor patch is available at v3.7.4.
Information disclosure in SiYuan before v3.7.4 exposes administrator workspace state to unauthenticated network attackers via an improperly protected getConf API endpoint. The UILayout filter fails to enforce authorization boundaries between publish readers and the administrative configuration layer, leaking open document names, recent search terms, notebook directory paths, and private asset locations. No public exploit code or CISA KEV listing exists at time of analysis; however, the unauthenticated network vector makes the flaw trivially reachable on any internet-exposed SiYuan instance with publish features active.
PDF annotation content in SiYuan through v3.7.2 is exposed without authorization via the /api/asset/getFileAnnotation endpoint, which applies only the generic CheckAuth middleware rather than the publish-access controls enforced on the /assets/* route. When publish authentication is disabled, anonymous readers can retrieve .sya annotation files containing private highlights and notes from password-protected, unpublished, or publish-forbidden documents simply by knowing a valid asset path; authenticated publish RoleReaders face the same missing check. The CVSS 4.0 score of 6.9 reflects a network-accessible, unauthenticated vector with limited scope - encrypted notebooks are not affected - and no public exploit code or CISA KEV listing has been identified at time of analysis.
Static-route access control bypass in SiYuan before v3.7.4 allows attackers to read sensitive workspace data by directly accessing file-serving routes that skip the authorization checks enforced on the REST API. Affected deployments include any SiYuan instance operating in disabled-auth mode (anonymous access) or where publish reader tokens have been issued, as those token holders can reach templates, snippets, and export artifacts without restriction. No public exploit or active exploitation has been identified at time of analysis, but the patch to v3.7.4 is available and should be applied promptly given the unauthenticated attack vector in disabled-auth configurations.
Unauthorized information disclosure in SiYuan exposes protected document metadata and content snippets via three unenforced API endpoints - getBlockBreadcrumb, getRefText, and getBlockTreeInfos - in all versions before v3.7.4. Unauthenticated network actors or low-privilege RoleReader accounts can bypass publish-access controls on documents explicitly marked as publish-forbidden or password-protected, retrieving titles, ancestor block content snippets, reference text, and path metadata by supplying block IDs. No public exploit has been identified at time of analysis; vendor patch is available in v3.7.4.
Unauthenticated information disclosure in SiYuan versions before 3.7.4 allows retrieval of block attributes - names, aliases, memos, and custom fields - from documents protected by publish-access controls. The `getBlockAttrs` and `batchGetBlockAttrs` API endpoints accept POST requests with block IDs without verifying the caller's authorization against the parent document's access policy, directly bypassing the publish-access restriction (CWE-862). No active exploitation has been confirmed and no public proof-of-concept has been identified; impact is bounded to metadata exposure rather than full document content, but the unauthenticated network vector warrants prompt patching for internet-exposed instances.
Information disclosure in SiYuan before v3.7.4 allows unauthenticated remote attackers to retrieve the server's absolute filesystem workspace path, operating-system username, and installation layout by querying the resolveAssetPath endpoint with relative asset paths harvested from published documents. The endpoint enforces only a lightweight CheckAuth gate rather than full authentication, satisfying CWE-639's authorization bypass pattern, and returns raw absolute paths to any network-reachable caller. Vendor patch v3.7.4 has been released; no active exploitation has been confirmed and no public proof-of-concept code has been identified at time of analysis.
Missing authorization controls on three internal API endpoints in SiYuan before v3.7.4 allow callers operating within the publish context to retrieve database column schemas, template expressions, select vocabularies, and workspace-wide block identifiers that were never intended to cross publish access boundaries. The affected endpoints - getAttributeViewKeysByID, getBlockDefIDsByRefText, and getBlockRelevantIDs - perform their operations without consulting publish-scoped permission checks, constituting a CWE-862 (Missing Authorization) flaw. A vendor patch is available at v3.7.4, no public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Five path-resolution API endpoints in SiYuan's publish mode fail to enforce access controls, allowing unauthenticated or minimally-authenticated readers to enumerate the complete private document tree. Affected versions are all SiYuan releases up to and including v3.7.2; v3.7.4 contains the fix. An attacker targeting a SiYuan instance running in publish mode with Publish.Auth.Enable set to false can call getFullHPathByID, getHPathByID, getPathByID, getIDsByHPath, and getHPathByPath without any credentials to recover notebook names, folder hierarchies, document titles, and document IDs - including for content explicitly marked hidden, password-protected, or publish-forbidden. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated information disclosure in SiYuan before v3.7.4 exposes encrypted notebook identifiers, names, and memory-resident unlock states via the getEncryptedNotebookStatus API endpoint without enforcing publish-access filtering. Any anonymous or publish-mode client that can reach the instance can enumerate the full list of encrypted notebooks and determine which are actively decrypted in server memory, leaking sensitive organizational metadata. No public exploit has been identified and no CISA KEV listing exists; a vendor-released patch is available in v3.7.4.
SiYuan's /api/tag/getTag endpoint leaks tag labels and occurrence counts from password-protected documents to any unauthenticated network caller, constituting an authorization bypass under CWE-863. All SiYuan versions before 3.7.4 are affected, as confirmed by a vendor GitHub Security Advisory (GHSA-mp7r-57w4-5qm3) and the EUVD entry EUVD-2026-57452. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; however, the zero-friction network exploitability (PR:N, AC:L, UI:N) means any attacker with network reach can enumerate protected document vocabulary with a single API call.
Information disclosure in SiYuan v3.7.4-alpha.1 (pre-release only) permits any caller who passes basic authentication to retrieve complete database view metadata - including view names, icons, layout types, and per-field Hidden flags - for arbitrary database blocks by supplying an avID, regardless of their access level. The `/api/av/getAttributeViewFieldViews` endpoint introduced in commit acfc02ee8 applies `CheckAuth` middleware but omits any ownership or publish-access filter, producing a CWE-862 Missing Authorization condition. The vulnerability was corrected in the v3.7.4 stable release; no public exploit or active exploitation has been identified at time of analysis.
Unauthenticated information disclosure in SiYuan before v3.7.4 exposes notebook metadata - including names, document counts, storage sizes, and timestamps - for closed and non-published notebooks via the /api/notebook/getNotebookInfo endpoint, which performs no authorization check. Any attacker with network access to the SiYuan API can enumerate structural information that the application's access control model explicitly intends to hide from readers. No public exploit or CISA KEV listing has been identified at time of analysis, but the zero-friction, unauthenticated attack path makes this trivially exploitable wherever the API is internet- or network-exposed.
Denial-of-service in OpenStack Designate's mDNS handler allows unauthenticated remote disruption of DNS resolution across all tenants sharing an affected pool path. The handler performs pool-blind zone lookups: when two zones with the same name exist across different pools - a condition reachable either through a separate cross-tenant zone overlap vulnerability or via legitimate cross-pool configurations - the lookup fails deterministically, causing the handler to return REFUSED for all DNS queries through that path. The _handle_notify trigger is reachable via a single unauthenticated UDP packet, with no public exploit code identified at time of analysis and no confirmed active exploitation in the CISA KEV catalog.
Server-side request forgery in Microsoft UFO's URL validation layer allows unauthenticated remote attackers to bypass the SSRF guard by supplying IPv6 transition addresses - NAT64 (64:ff9b::/96, 64:ff9b:1::/48), 6to4 (2002::/16), or Teredo (2001::/32) - that embed private or link-local IPv4 destinations the guard would otherwise reject. The bypass grants access to cloud instance metadata services (e.g., AWS IMDSv1 at 169.254.169.254), internal APIs, or localhost in any deployment where UFO processes externally-influenced URLs. No active exploitation is confirmed (not in CISA KEV), but the technique is well-documented in SSRF research and the fix is available in version 3.0.8.
Broken access control in Winter CMS (composer/winter/wn-cms-module ≤ 1.2.12) allows any authenticated backend user holding at least one Theme Editor permission to pivot beyond their authorized scope via crafted AJAX requests. The Cms\Controllers\Index controller gated section access with OR-logic across five permissions but individual handlers - onSave(), onDelete(), onDeleteTemplates(), and AssetList.onUpload() - performed no per-template-type authorization check, enabling cross-template actions such as deleting layouts, modifying partials, reading content files, and uploading arbitrary files to the active theme asset directory. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; vendor-released fix is v1.2.13.
WhatsUp Gold versions before 2026.0.2 allow a privileged attacker to configure a LogToFile action with an arbitrary file extension, enabling placement of server-executable files (e.g., .aspx web shells) directly within the IIS web root directory. Progress Software confirmed the issue and released a patch in version 2026.0.2, documented in the August 2026 security bulletin. No public exploit code has been identified at time of analysis, but the high CIA impact combined with the adjacent-network vector makes this a material insider threat and post-compromise persistence risk.
Session token validation bypass in IBM i versions 7.3 through 7.6 enables a remote low-privileged attacker to circumvent security restrictions by exploiting improper session token handling (CWE-294). The CVSS vector confirms network reachability but mandates high attack complexity and an existing authenticated foothold, capping the score at 6.8 Medium. No public exploit code or CISA KEV listing has been identified at time of analysis, and IBM has issued a vendor patch.
Arbitrary file write in Progress Software's WhatsUp Gold (all versions before 2026.0.2) enables a privileged attacker with adjacent network access to place attacker-controlled files in web-accessible directories on the host server - a primitive that commonly leads to web shell deployment and subsequent unauthenticated remote code execution via HTTP. Exploitation is constrained by both a high-privilege credential requirement and an adjacent-network attack vector (CVSS:3.1/AV:A/PR:H), substantially narrowing the practical attack surface compared to the full C:H/I:H/A:H impact triad would suggest. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch is confirmed available in version 2026.0.2.
Provider-confusion in NextAuth.js (next-auth and @auth/core) allows an attacker to link their own OAuth identity at a target provider to a victim's Auth.js user account, granting the attacker persistent unauthorized sign-in. The flaw stems from OAuth anti-CSRF cookies - state, nonce, and PKCE verifier - being stored globally without binding to the originating provider, so a callback for one provider can consume check values minted during a flow initiated with a different provider. No public exploit code or CISA KEV listing exists at time of analysis, but the CVSS 6.8 score with C:H/I:H reflects a full account-takeover outcome when the required multi-condition setup is present.
Plaintext credential exposure in MongoDB SQL Schema Builder CLI allows local users to read authentication material from diagnostic output or log files. The CLI writes its startup configuration - including connection settings containing authentication credentials - to standard output and optionally to a log file on disk without redacting sensitive values. Any local user with read access to the terminal session, the log directory, or a downstream log aggregation system can harvest those credentials and use them to authenticate to the connected MongoDB instance.
Self-hosted JFrog Artifactory deployments using Helm may expose generated TLS private keys within rendered Kubernetes manifests, where key material persists in cleartext accessible to highly privileged local users. Affecting Artifactory versions below 7.161.16 in the 7.161.x branch and below 7.146.35 in earlier LTS branches, this CWE-312 flaw can facilitate TLS impersonation or decryption of encrypted client-to-repository communications if exposed keys are not rotated after discovery. No public exploit has been identified at time of analysis, and exploitation is structurally constrained by a requirement for pre-existing high-privilege local Kubernetes cluster access.
Unsafe deserialization of stored session data in JFrog Artifactory allows a party with write access to that session store to achieve full confidentiality, integrity, and availability compromise under specific conditions. All versions are affected per the wildcard CPE string, and exploitation requires both high privileges and high attack complexity. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Integer underflow in GStreamer's avidemux element allows a remote unauthenticated attacker to trigger heap out-of-bounds read and write, heap memory disclosure, and application crash by delivering a crafted AVI file containing a malformed FUJIFILM strd chunk. The gst_avi_demux_parse_strd() function decrements its remaining-length counter by fixed offsets without bounds checking, causing unsigned integer wraparound for payloads of exactly 106 or 107 bytes. Because avidemux is auto-plugged by GStreamer's high-level components (playbin, decodebin, gst-discoverer), any application that opens or previews a media file - including GNOME Files, Nautilus, Totem, and many others - can trigger the vulnerability without user awareness. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; a vendor-released patch is available in gst-plugins-good 1.28.6.
Path traversal in IBM i 7.3 through 7.6 exposes sensitive files to remote authenticated attackers by failing to enforce restricted directory boundaries. The vulnerability (CWE-22) allows a low-privileged authenticated user to escape intended directory scope and read arbitrary file system paths, resulting in high confidentiality impact with no integrity or availability effect. No public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-team credential disclosure in the Apache Airflow Google Provider's Cloud Secret Manager backend exposes every team's Connections and Variables to every other team in multi-team deployments. The backend's public methods accepted a team_name parameter but silently discarded it before the internal secret lookup, collapsing all team namespaces into one shared, unscoped lookup. No public exploit has been identified at time of analysis; the vendor-released fix is apache-airflow-providers-google 22.3.0.
OS command injection in IBM i 7.3 through 7.6 enables remote authenticated attackers to disrupt system availability by submitting crafted input containing special elements that are improperly neutralized before being passed to OS-level commands. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) confirms network-reachable exploitation requiring only low-privilege credentials, with high availability impact and a secondary low integrity impact. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and broad version range across actively supported IBM i releases make patching a priority for affected IBM Power Systems environments.
Versioned object access control bypass in RustFS allows authenticated principals holding only s3:GetObject permission to read historical object versions by supplying an explicit versionId parameter on GetObject, CopyObject source, or UploadPartCopy source requests. The authorization boundary in access.rs conflated two distinct IAM actions - s3:GetObject and s3:GetObjectVersion - by always evaluating versioned reads against the former, effectively collapsing a privileged historical-version operation into an ordinary current-object read. No active exploitation has been confirmed (not in CISA KEV), and no public exploit code has been identified; however, the bypass is trivial to exercise for any valid IAM credential with bucket read access.
Security restriction bypass in IBM i 7.3 through 7.6 allows remote authenticated attackers to circumvent access controls by supplying a crafted user profile name that passes improper validation logic. The vulnerability is tagged as a privilege escalation path, meaning successful exploitation likely enables access to resources or operations beyond the attacker's authorized scope. No public exploit code or CISA KEV listing is present at time of analysis, but a vendor patch is available and should be prioritized given the high confidentiality impact indicated by CVSS.
Unauthorized access to restricted support information in JFrog Artifactory allows a low-privileged authenticated user to read sensitive support data under specific, undisclosed conditions. The vulnerability stems from missing authorization controls (CWE-862) on support-related endpoints, exposing information that should be restricted to administrative roles. No public exploit has been identified at time of analysis, and no CISA KEV listing was found.
FleetDM Fleet's target search endpoint (POST /api/latest/fleet/targets) fails to apply the same field-masking logic used by other team-facing API endpoints, exposing unmasked team enroll secrets and credential-bearing agent options to any authenticated Observer, Observer+, or Technician user before v4.87.0. The practical blast radius extends well beyond information disclosure: leaked enroll secrets allow unauthorized hosts to be enrolled into affected teams, and if agent options contain embedded AWS secret access keys, proxy passwords, or session tokens, those credentials are also retrieved in cleartext. No public exploit code has been identified at time of analysis, though the vulnerability is trivially reproducible by any low-privileged Fleet user.
SQL injection in IBM i 7.3 through 7.6 allows remote authenticated attackers to modify SQL table data by injecting unsanitized special elements into SQL commands processed by the platform. The CWE-89 root cause confirms missing or inadequate input neutralization within IBM i's SQL handling layer, enabling unauthorized data manipulation. No public exploit identified at time of analysis; a vendor patch is available via IBM advisory 7283289.
JFrog Artifactory contains a missing authorization flaw that allows an authenticated user holding a publisher role - but explicitly denied delete permissions - to modify protected package content under specific conditions. This integrity bypass (CWE-862) is reachable over the network without elevated privileges, making it a supply chain risk for organizations using Artifactory as their artifact repository. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Denial of service in open-iscsi's iscsiuio daemon allows an unauthenticated attacker on the same local network segment to render the daemon permanently unresponsive by sending a single crafted ICMPv6 Router Advertisement carrying a zero-length option, triggering an infinite loop and sustained CPU exhaustion. Affected deployments include Red Hat Enterprise Linux 9 and 10 systems where iscsiuio is active for iSCSI hardware offload. A secondary out-of-bounds read risk exists when a short IPv6 payload is processed, though no memory corruption or data exposure has been confirmed from available intelligence; no public exploit code or CISA KEV listing has been identified at time of analysis.
Integer underflow in open-iscsi's iscsiuio daemon crashes the process when parsing malformed DHCPv6 Advertise packets with a truncated UDP length field, disrupting iSCSI storage connectivity. Systems running Red Hat Enterprise Linux 9 and 10 with iscsiuio actively engaged in a DHCPv6 exchange are exploitable by any unauthenticated attacker on the same adjacent network segment. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis; real-world impact is highest in shared or multi-tenant storage network environments where adjacency cannot be guaranteed.
Cleartext exposure of list-shaped Variable secrets in Apache Airflow Task SDK (all versions before 3.3.1) allows any authenticated Airflow user to recover sensitive values directly from task execution logs and the Rendered Templates UI. The masking logic in _mask_and_deserialize_variable correctly handled string- and dict-typed JSON Variable values but contained no branch for the list type, so arrays - which may hold passwords, API tokens, or connection strings - were returned unredacted. No public exploit has been identified at time of analysis; however, organizations that patched CVE-2026-59244 remain fully exposed because that fix addressed only the dict case, and must upgrade again to 3.3.1.
Sensitive credential exposure in Apache Airflow 3.3.0 allows an authenticated Viewer with configuration-read access to retrieve team-scoped sensitive options - including Celery broker URLs with embedded credentials - in cleartext via the Config API. The secrets masker evaluated sensitivity against raw section names without resolving team-prefixed sections (e.g., [team_a=celery]) back to their registered base section, so team-scoped overrides silently bypassed masking while equivalent global options were correctly redacted. This is a third distinct masker bypass variant following CVE-2026-48828 and CVE-2026-48892, meaning deployments that already upgraded to 3.3.0 to remediate those issues remain exposed. No public exploit identified at time of analysis.
Stored XSS in the Draft List WordPress plugin (versions ≤2.6.3) allows a Contributor-level authenticated user to inject persistent JavaScript into public-facing pages by exploiting a sanitization ordering flaw in the [drafts] shortcode and widget template engine. The plugin sanitizes the template string before substituting the {{draft}} placeholder with the raw post_title, meaning a crafted title containing a double-quote can break out of an HTML attribute context and execute arbitrary JavaScript in the browsers of visitors who load the affected page. Version 2.6.4 resolves the issue; no public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-tenant IDOR in CERT/CC's VINCE platform allows any authenticated case participant to read another vendor's embargoed CaseStatement and per-vulnerability CaseMemberStatus records by supplying an arbitrary member ID in the API request. The authorization check in test_func validates only that the requester is a participant in the case (_is_my_case) but does not verify that the requested member ID belongs to their own organization, making the share_status embargo control bypassable. Affected versions are all VINCE releases before 3.0.44; no public exploit or active exploitation (CISA KEV) has been identified at time of analysis.
Insecure Direct Object Reference (IDOR) in Apache Allura before 1.19.1 allows unauthorized access to multiple Artifact types due to missing server-side permission checks. Attackers who can interact with the platform can reference artifact objects directly by their identifiers and retrieve content beyond their authorization level, resulting in information disclosure across potentially broad artifact categories. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Excessive Kubernetes RBAC privileges in the insights-client ServiceAccount within Red Hat Advanced Cluster Management for Kubernetes 2 expose all cluster Secrets to any attacker who compromises the pod or obtains its token. The ServiceAccount is bound to a ClusterRole granting cluster-wide get, list, and watch on all Secrets, far exceeding the single Secret the component actually requires. If the insights-client pod is breached, an attacker can read every Secret across the hub cluster - including managed-cluster kubeconfigs - enabling lateral movement to downstream managed clusters. No public exploit code has been identified at time of analysis, and this CVE is not listed in CISA KEV.
Secret exposure in Apache Airflow's Rendered Templates UI allows any authenticated user with task-level view access to read plaintext credential values that should have been masked. The secrets masker's `isinstance(str)` guard silently skips dict-typed Python objects, meaning JSON Variables accessed via `var.json` and containing dict payloads (e.g., database credentials, API keys stored as structured JSON) are rendered in cleartext rather than redacted. No public exploit is identified at time of analysis; however, the disclosure requires nothing more than standard UI navigation by a legitimately authenticated user.