CVE-2026-76594

{}

{}

{}

{"bugzilla": {"description": "advisor-backend: advisor-backend: Unauthenticated /private/import_content/ endpoint allows global rule-catalogue overwrite", "id": "2519645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519645"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "status": "draft"}, "cwe": "CWE-306", "details": ["A flaw was found in advisor-backend. A network-adjacent unauthenticated attacker could exploit a vulnerability in the `/private/import_content/` endpoint, which lacks proper authentication and permission checks. This allows the attacker to overwrite the global Advisor rule, resolution, and playbook catalogue. When combined with another vulnerability involving unsafe YAML deserialization, this could lead to arbitrary code execution on affected systems."], "mitigation": {"lang": "en:us", "value": "Restrict network access to the `/private/import_content/` endpoint of the `advisor-backend` service. Configure network policies or firewall rules to limit connections to this path to only trusted internal networks or localhost, preventing unauthenticated external access. This will reduce the attack surface by ensuring only authorized internal services can interact with the content import functionality. If the service is reloaded or restarted, ensure the network restrictions remain in effect."}, "name": "CVE-2026-76594", "public_date": "2026-09-02T13:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-76594\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-76594"], "statement": "This is an Important vulnerability as an unauthenticated, network-adjacent attacker can overwrite the global Red Hat Advisor rule catalogue. This flaw, when chained with a separate unsafe YAML deserialization vulnerability, could lead to remote code execution on customer hosts by injecting malicious Ansible playbooks. The affected endpoint is exposed on the same listener as the public API, increasing the risk in standard deployments.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 75.0, "confidence_source": "inferred", "scores": [{"score": 75.0, "source": "inferred"}]}, "product": "advisor-backend", "vendor": "advisor-backend"}], "created": "2026-09-03T13:30:04.630034+00:00", "updated": "2026-10-04T20:48:12.733848+00:00", "vendors": ["advisor-backend", "advisor-backend$PRODUCT$advisor-backend"]}