Vulnerability · Published Aug 11, 2026 · Assigned by redhat

CVE-2026-71467Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated via upgrade: websocket header spoofing

High 7.5

In plain English

A high-severity improper authentication in Red Hat Advanced Cluster Management for Kubernetes 2.17 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.8%top 42.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an `Upgrade: websocket` header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the `/federated` endpoint with the `Upgrade: websocket` header. This allows the attacker to bypass authentication and access federated search results across all configured remote managed hubs, leading to information disclosure.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	see references

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

RHSA-2026:60386 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-71467 vdb-entry, x_refsource_REDHAT
RHBZ#2512146 issue-tracking, x_refsource_REDHAT