CVE-2026-110108
Description
A flaw was found in MateCloud. Administrative object storage endpoints lack proper access control, allowing any authenticated user to perform restricted storage operations. A remote authenticated user with low privileges can exploit this vulnerability to list stored objects, download files belonging to other users, delete data, or upload arbitrary content.
Statement
This vulnerability is rated as Important because remote low-privileged users can compromise entire storage buckets without administrative privileges, causing high confidentiality and integrity impact across the deployment. MateCloud is not distributed or supported within Red Hat products, leaving default enterprise offerings unaffected.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Access Control
Technical Impact: Read Application Data; Modify Application Data; Execute Unauthorized Code or Commands; Gain Privileges or Assume Identity
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
