AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-76827

Red Hat search-indexer. This vulnerability: protection mechanism failure

Red Hat

CVE-2026-76827 · Published Aug 19, 2026 · updated Sep 5, 2026

Medium6.8
No fix yet
Red Hat advisory

A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is possible because the delta-sync write paths in search-indexer do not properly restrict UPDATE/DELETE operations to data owned by the calling cluster. An attacker could exploit this by crafting specific user identifiers (UIDs) with a different cluster's prefix.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-693

More Red Hat advisories

All Red Hat
High 8.0Aug 19Red Hat acm-operator-bundle. The build process: untrusted functionality includedCVE-2026-76139no fix yetHigh 7.7Aug 19Red Hat mce-operator-bundle. The build process fetches: remote code executionCVE-2026-75569no fix yetCritical 9.9Aug 19Red Hat Advanced Cluster Management for Kubernetes 2: improper access controlCVE-2026-70496no fix yetCritical 9.3Aug 19Red Hat: authentication bypassCVE-2026-66794no fix yetMedium 6.2Aug 19Red Hat volsync-addon-controller. This vulnerability: code injectionCVE-2026-18874no fix yetCritical 9.1Aug 19Red Hat search-v2-operator. This vulnerability: privilege escalationCVE-2026-71470no fix yet