CVE-2026-16242
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.4
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
- EPSS probability
- 0.80%
- CWE
- CWE-306
- Published
- 2026-07-20
- Last modified
- 2026-09-14
Affected products
- Red Hat multicluster engine for Kubernetes 2.10
- Red Hat multicluster engine for Kubernetes 2.8
- Red Hat multicluster engine for Kubernetes 2.9
- Red Hat multicluster engine for Kubernetes 2.11
- Red Hat multicluster engine for Kubernetes 2.6
- Red Hat multicluster engine for Kubernetes 2.17
- Red Hat multicluster engine for Kubernetes 2.1
- Red Hat multicluster engine for Kubernetes 2.11.0
Weakness type
Related vulnerabilities
- CVE-2026-67277 — Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
- CVE-2026-81735 — UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution
- CVE-2026-65956 — KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF
- CVE-2026-92808 — Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise
- CVE-2026-82695 — Tenda AC18 Telnet telnet missing authentication
- CVE-2026-82694 — Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication
- CVE-2026-82693 — Tenda AC1206 Web UI telnet TendaTelnet missing authentication
- CVE-2026-80462 — Privilege Escalation in Progress Chef Automate