CVE-2026-49446
Description
A flaw was found in Cosmos. An attacker with a valid API key for an enrolled device can bypass authentication checks by supplying a crafted header through the Constellation Nebula tunnel. This allows for user impersonation and unauthorized access to administrative functions, potentially leading to sensitive data exposure or modification within proxied applications.
Statement
Red Hat Product Security rates this vulnerability as Important because an attacker holding low-privileged device credentials can remotely bypass security boundaries to achieve complete confidentiality and integrity compromise of downstream administrative services. Cosmos is not packaged, shipped, or supported in Red Hat Enterprise Linux or any other Red Hat product portfolio offerings. Consequently, Red Hat environments and supported services are not impacted by this flaw.
Understanding the Weakness (CWE)
Access Control,Integrity
Technical Impact: Bypass Protection Mechanism; Execute Unauthorized Code or Commands
An attacker could bypass the protection mechanism by including dangerous inputs that are only produced after the modification (such as canonicalization and cleansing). This can be used to launch various attacks including injection, executing arbitrary code, or causing other unintended behavior.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
