RHSA-2026:94612HighCVSS 9.1

Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update

Published
November 3, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (8)

CVE-2026-102278 →CVE-2026-73501 →CVE-2026-73502 →CVE-2026-77354 →CVE-2026-84445 →CVE-2026-88031 →CVE-2026-92615 →CVE-2026-102276 →

📋 Description

CVE-2026-73501 — github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default CVE-2026-73502 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unauthenticated nil-pointer dereference CVE-2026-77354 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via uncontrolled resource consumption in deepObject query parameter decoding CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-88031 — go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs CVE-2026-92615 — flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed CVE-2026-102276 — brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns CVE-2026-102278 — brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

🎯 Affected products29

  • Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:087fc5f7104137321f01461359f1ae0a08c542f6e4c89793d18105e9c4cf45ad_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:777ac4942da38e934ae2eec871d06d103f7e1f9f136241db054185f00360c7b6_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:7b7c232f7fbd6d0913a67f218880c4b774a2a723306c8dbca4a7ee0d175ac5c4_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e3e5e560321a1789f8e0a3efaed014e1d78bfe56cc9f39032c8240bf5c9ee39d_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-api-rhel10@sha256:37ad1ff681bb3d4530298ca53c91e543df34312eef20c31857a3794bd6fb5e7e_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-api-rhel10@sha256:8e787975a06cef54ea3b2b61a5f2419af06822c8085dc31704f925abd9b3224a_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:0231adf29782d4a67b2232ab220ee295a3ba64856abaa33f62a3a10354712fb3_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:e1517d8bbd4ff6acd14dca25b416d063e4134715e69d45f1b487c2efc14a433e_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:1c11442a28d89264f7e8ee9bb4180bee381161b06dfb74cf1fba4dacc10ab206_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:d8734168f48eed69fd893a8392634d78e1b12d43efb4dc366b5423ff1f4b8a25_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:0de36d8ea425a524b5d517b9be5d28806cf4c4d168528503aef78c7f0c675d09_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:5f3c39597518a8a9cde3287b20cf69e7cb37d18e3e7a53163271a437aa0b7bf6_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:63567409df499efb450adedc450b81f5819a923e3e8da92486bf561c32296fc5_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:c3034a98b0eed010c5d602c67d1a251dccebf4989c49f644a17ef1af9fff4e9e_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:268b388b569377f7066f07fe443a57ef86ac8775e13f1605979a7ab3e4b51ca5_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:d726c4e53103776d55eee9c9efc0cac185d75a168810bb960ad893769dcb72e0_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:539eea6f16f8c012781e360de343d6118e591f53ff0dc5145611aab502396ba7_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ed42afc50cfa89512a7b8a2bae49775f6d115e1cafbb19a6657ffc7a062eaee2_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:5dca38733a1ef9d0913c6ea6f1062d5470b65b43284a4611d13ed139adb69f2f_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:ae3fd0ca831fcf5132be9fa76bba95da42f1c2ffb590c400227b362b97b13c30_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:634a55e5a320fcb8f744e43dcc18e39d3a63771ea91ca4d8659f0966c774f09c_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:c3b2abc22a2c8c56d64ca93c16a3ec1df7e1c5f504e0e550230120d61e2b175b_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:318b70677f95f2a7dff219fe30d831adb5ec5bdeea4b5e5fe664d162a8d0e5ed_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:50b40f7012464fc2fedbd343db30f7fdaafbb382aa5beb33c475ff0e3489714c_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:35becda5154f3c24bc26cb89a6136a3ecd996e44d7008ca86bf22035d8dbb3e1_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:977c02e894b4c9a0a1cc663520138a7e7513398f7e3da7af974e743723449818_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:23c2ab167e5c70797633054e5b4826ed09bd983fa396daffb5aee6db15a25652_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:4f1df8a76cc0223011076fcfe64636c36e1f95ed026500373b5ca48a4d468b75_amd64 as a component of Red Hat Edge Manager 1.2

✅ Remediation

See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2 Workaround: As a partial workaround, administrators can audit their OpenAPI specification files and ensure every content parameter declares an explicit schema for each media type, which prevents the nil-dereference code path from being reached. Workaround: If upgrading go.mongodb.org/mongo-driver to version 1.17.10 (v1) or 2.9.1 (v2) is not immediately possible, the following steps can reduce exposure: - Validate file identifiers before passing them to GridFS operations. Ensure that file IDs supplied by users or external systems are scalar values (e.g., primitive.ObjectID or string) and reject any structured BSON documents or maps. This prevents query operator injection. - Restrict who can supply GridFS file identifiers. Do not allow unauthenticated or low-privilege users to directly control the file ID parameter in GridFS API calls (Delete, OpenDownloadStream, DownloadToStream, etc.). Workaround: There is no application-level workaround that fully eliminates this race condition without a code change. The following deployment-level measures reduce exposure in multi-tenant environments: - Avoid mTLS client certificates for git repositories: If tenant Repository resources do not supply client TLS certificates (httpConfig.tls.clientCertificate), the most sensitive data (client private key material) is absent from the global transport and cannot leak. - Avoid skipServerVerification: Do not set httpConfig.skipServerVerification: true on any Repository resource. This prevents a tenant's InsecureSkipVerify=true from propagating to other tenants' clones, which would otherwise allow an on-path attacker to serve malicious configuration. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (13)