CVE-2026-108746
Description
A flaw was found in Vearch. This vulnerability allows privilege escalation due to improper authorization enforcement during role permission evaluation. An authenticated user with limited permissions can bypass access restrictions to modify or delete data and assign themselves elevated privileges, potentially gaining full cluster administrator access.
Statement
Red Hat evaluates this vulnerability as having an Important severity impact because an authenticated remote attacker with minimal privileges can bypass access constraints to gain full administrative takeover of the deployment. However, Vearch is not distributed or supported in Red Hat Enterprise Linux or any other Red Hat product portfolio offerings. Consequently, supported Red Hat deployments are not impacted by this issue.
Understanding the Weakness (CWE)
Access Control
Technical Impact: Gain Privileges or Assume Identity
A user can access restricted functionality and/or sensitive information that may include administrative functionality and user accounts.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
