CVE-2026-117681
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
41/100
Published: 2026-10-31
Modified: 2026-11-02
First seen: 2026-10-31
Status: active
Attack Surface
Adjacent
No Interaction
Conf. Impact
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Adjacent
AC:
High
PR:
Low
UI:
None
S:
Changed
C:
High
I:
High
A:
High
Description
A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security (TLS) certificate verification for connections to internal backend services in environments lacking a default service certificate authority. Because the proxy attaches a cluster-scoped authentication token with user impersonation rights to these requests, an adjacent network attacker capable of intercepting traffic can capture the credentials to gain full administrative control of the cluster.
Weakness Classification (1)
References & Advisories (2)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT