What is GHSA-9p2m-pch8-59mp?

GHSA-9p2m-pch8-59mp is a security advisory published by GitHub Security Advisories with Critical severity. Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug...

Which CVE IDs does GHSA-9p2m-pch8-59mp cover?

GHSA-9p2m-pch8-59mp covers the following CVE IDs: CVE-2026-100102. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-9p2m-pch8-59mpCritical

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug...

Vendor

GitHub Security Advisories

Published

October 5, 2026

Last Modified

October 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-100102 →

📋 Description

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-100102
https://portal.perforce.com/s/cve/a91Qi000003FE7NIAW/rce-via-exposed-jdwp-debug-agent-in-p4search
https://github.com/advisories/GHSA-9p2m-pch8-59mp