Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-09-04T16:36:28 undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CWE-346

undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool. Because the internal cache key falls back to an empty origin string, a cacheable or in-flight response from one upstream origin is returned for a request to a different, trusted origin whenever the method, path, and relevant headers match, which permits cross-origin information disclosure and persistent cache poisoning. The reporter demonstrated a full authentication bypass in which a JWT signed with an attacker-controlled key was accepted as belonging to a trusted issuer, and the trusted origin was never contacted. This is a regression introduced in 8.10.0 and affects undici versions from 8.10.0 up to 8.10.2. Applications using an Agent, which carries the origin in its dispatch options, are not affected. Users should upgrade to undici 8.10.2.

A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure and potentially a full authentication bypass. An attacker could exploit this by having a trusted origin accept a malicious token, without contacting the legitimate trusted origin.

This flaw is present in the undici HTTP client library used by Node.js. When an application composes undici's Cache or Deduplicate interceptor directly onto a Client or Pool object (rather than onto an Agent), the library's internal cache and in-flight-request deduplication keys omit the destination origin. As a result, a cached or in-flight response captured for one upstream origin can be returned for a request intended for a different, trusted origin whenever the method, path, and relevant headers match. In the most severe demonstrated scenario, this allowed an attacker-controlled JWT to be accepted by the application as though it had been validated against a legitimate, trusted issuer, without that issuer ever being contacted — resulting in a full authentication bypass. Exploitation requires that the affected application attach the Cache or Deduplicate interceptor directly to a Client/Pool — the default Agent-based dispatch path is not affected, since Agent already carries the origin in its dispatch options — and that an attacker can influence or collide with the cache/deduplication key for at least one origin the application communicates with.). Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible to undici 8.10.2 or later. Red Hat Hardened Images 2026-08-12T00:00:00Z RHSA-2026:54389 nodejs26-main-26.7.0-1.5.2.hum1 Red Hat Hardened Images 2026-08-12T00:00:00Z RHSA-2026:54438 nodejs24-main-11.16.0-1.24.18.1.0.2.2.hum1 Red Hat Hardened Images 2026-09-04T00:00:00Z RHSA-2026:63782 grafana12-4-main-12.4.9-0.6.hum1 Exploit Intelligence Affected exploit-intelligence/vulnerability-analysis-rhel9 OpenShift Pipelines Affected openshift-pipelines/pipelines-console-plugin-pf5-rhel9 OpenShift Pipelines Affected openshift-pipelines/pipelines-console-plugin-rhel9 Red Hat AMQ Broker 7 Not affected amq-broker-bin.zip Red Hat AMQ Broker 7 Affected amq-broker-maven-repository.zip Red Hat Ansible Automation Platform 2 Not affected automation-platform-ui Red Hat Build of Podman Desktop Affected rh-podman-desktop.git Red Hat Developer Hub Not affected rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend Red Hat Developer Hub Not affected rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend Red Hat Developer Hub Not affected rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki Red Hat Developer Hub Not affected rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator Red Hat Developer Hub Not affected rhdh/rhdh-hub-rhel9 Red Hat Enterprise Linux 10 Not affected grafana Red Hat Enterprise Linux 10 Will not fix nodejs22 Red Hat Enterprise Linux 10 Affected nodejs24 Red Hat Enterprise Linux 10 Affected nodejs26 Red Hat Enterprise Linux 10 Affected rhel10/nodejs-24 Red Hat Enterprise Linux 10 Affected rhel10/nodejs-24-minimal Red Hat Enterprise Linux 10 Not affected ubi10/nodejs-24 Red Hat Enterprise Linux 10 Not affected ubi10/nodejs-24-minimal Red Hat Enterprise Linux 8 Will not fix nodejs:22/nodejs Red Hat Enterprise Linux 8 Affected nodejs:24/nodejs Red Hat Enterprise Linux 8 Affected ubi8/nodejs-24 Red Hat Enterprise Linux 8 Affected ubi8/nodejs-24-minimal Red Hat Enterprise Linux 9 Will not fix nodejs:22/nodejs Red Hat Enterprise Linux 9 Affected nodejs:24/nodejs Red Hat Enterprise Linux 9 Affected nodejs:26/nodejs Red Hat Enterprise Linux 9 Affected rhel9/nodejs-24 Red Hat Enterprise Linux 9 Affected rhel9/nodejs-24-minimal Red Hat Enterprise Linux 9 Not affected ubi9/nodejs-24 Red Hat Enterprise Linux 9 Not affected ubi9/nodejs-24-minimal Red Hat Hardened Images Not affected jaeger Red Hat Hardened Images Will not fix nodejs25 Red Hat Hardened Images Not affected prometheus3.13 Red Hat Hardened Images Not affected rust Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-core-bff-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-dashboard-operator-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-dashboard-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-agent-ops-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-automl-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-eval-hub-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-gen-ai-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-maas-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-model-registry-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-monitoring-plugin-rhel9 Red Hat OpenShift Container Platform 4 Affected wasmedge Red Hat Openshift Data Foundation 4 Affected odf4/mcg-core-rhel9 Red Hat Openshift Data Foundation 4 Affected odf4/ocs-client-console-rhel9 Red Hat Openshift Data Foundation 4 Affected odf4/odf-console-rhel9 Red Hat Openshift Data Foundation 4 Affected odf4/odf-multicluster-console-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/code-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/dashboard-rhel9 Red Hat OpenShift Dev Spaces Not affected devspaces/openvsx-rhel9 Red Hat OpenShift Dev Spaces Not affected devspaces/pluginregistry-rhel9 Red Hat Trusted Artifact Signer Affected rhtas/rhtas-console-ui-rhel9 Secrets Management Console for Red Hat OpenShift Will not fix external-secrets-management/console-plugin-rhel9 Self-service automation portal 2 Affected ansible-automation-platform/automation-portal Self-service automation portal 2 Affected ansible-automation-platform/bootc-automation-portal-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-85152 https://nvd.nist.gov/vuln/detail/CVE-2026-85152 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-vp8m-p9jh-q5pm