CVE-2026-102795
Description
A flaw was found in Apache Traffic Server. Due to improper access controls, an unauthenticated remote attacker can bypass intended access restrictions. This vulnerability may allow an attacker to modify sensitive data or gain unauthorized access to protected resources.
Statement
This vulnerability is rated as Critical because unauthenticated remote attackers can bypass request validation and security boundaries with low attack complexity. In typical Red Hat deployments, this component is not included or supported across the product portfolio, preventing exposure under default configurations. Environments that do not deploy Apache Traffic Server as a reverse proxy or edge cache remain unaffected by this flaw.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Other
Technical Impact: Varies by Context
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
