Vulnerability · Published Oct 31, 2026 · Assigned by redhat

CVE-2026-117681Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone

High 8.0

In plain English

A high-severity improper certificate validation in konflux-ci. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 3.1)8.0High

Exploit odds (30 days)<0.1%top 99.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security (TLS) certificate verification for connections to internal backend services in environments lacking a default service certificate authority. Because the proxy attaches a cluster-scoped authentication token with user impersonation rights to these requests, an adjacent network attacker capable of intercepting traffic can capture the credentials to gain full administrative control of the cluster.

Affected products (as reported)

Vendor	Product	Versions
	konflux-ci	0.2.2-rc.2

Weakness: CWE-295 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://access.redhat.com/security/cve/CVE-2026-117681 vdb-entry, x_refsource_REDHAT
RHBZ#2563233 issue-tracking, x_refsource_REDHAT