Vulnerability Description
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kubev2V | Assisted Migration Agent | < 2026-06-07 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/security/cve/CVE-2026-53476Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2487233Issue TrackingThird Party Advisory
- https://github.com/kubev2v/assisted-migration-agent/pull/256Patch
FAQ
What is CVE-2026-53476?
CVE-2026-53476 is a vulnerability with a CVSS score of 9.6 (CRITICAL). A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gz...
How severe is CVE-2026-53476?
CVE-2026-53476 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-53476?
Check the references section above for vendor advisories and patch information. Affected products include: Kubev2V Assisted Migration Agent.