CVE-2026-71467

Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in search-v2-api via WebSocket Header

Publication date: 2026-08-11

Last updated on: 2026-08-26

Assigner: redhat-SADP

Description

A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an `Upgrade: websocket` header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the `/federated` endpoint with the `Upgrade: websocket` header. This allows the attacker to bypass authentication and access federated search results across all configured remote managed hubs, leading to information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-26

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-71467

EUVD

EUVD-2026-56897

Affected Vendors & Products

Vendor	Product	Version / Range
red_hat	acm_search_v2_api_rhel9	*
red_hat	search_v2_api	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability is an authentication bypass flaw in the search-v2-api component. The authentication middleware incorrectly skips authentication when a request includes an Upgrade: websocket header. An attacker can exploit this by sending a crafted HTTP POST request with this header to the /federated endpoint, bypassing authentication and accessing federated search results across all configured remote managed hubs, leading to information disclosure.

Detection Guidance

Check for unauthorized access to the /federated endpoint by monitoring HTTP POST requests with the Upgrade: websocket header. Inspect logs for requests to /federated without valid authentication tokens. Ensure FEATURE_FEDERATED_SEARCH is disabled if not required.

Impact Analysis

An unauthenticated attacker could exploit this to access sensitive federated search results across all configured remote managed hubs without proper authentication. This could lead to unauthorized disclosure of confidential or proprietary information, depending on the data stored in those hubs.

Compliance Impact

This vulnerability could lead to unauthorized access and disclosure of sensitive data, which may violate compliance requirements such as GDPR (data protection) or HIPAA (health information privacy). Organizations using affected components must address this flaw to maintain regulatory compliance.

Mitigation Strategies

Disable FEATURE_FEDERATED_SEARCH if not in use. Restrict network access to the /federated endpoint to trusted clients only. Apply patches or updates from Red Hat as soon as they become available.

Hi! I’m here to help you understand CVE-2026-71467. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70