Developer Tools

In GitLab EE versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 a high severity vulnerability CVE-2026-19228 was detected. This vulnerability allows an authenticated user to cause their AI usage to be attributed to another namespace. This occurs due to an Authorization Bypass Through User-Controlled Key flaw, where identity information supplied in requests is improperly authorized. By manipulating this information under certain conditions, an attacker can bypass intended access controls and shift AI usage accounting to a different tenant or namespace. To address this issue, users should upgrade GitLab EE to versions 19.1.4, 19.2.2, or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19228.

In OpenShift versions prior to the latest patch a high severity vulnerability CVE-2026-50236 was detected. This vulnerability allows authenticated attackers to make arbitrary network requests from the server’s privileged network position. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-50236.

In previous versions of OpenShift a high severity vulnerability CVE-2026-50236 was detected. This vulnerability allows an authenticated attacker to target arbitrary endpoints from a privileged network position. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-50236.

In previous versions of OpenShift a high severity vulnerability CVE-2026-50237 was detected. This vulnerability allows an attacker to bypass tenant egress restrictions. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-50237.

In Portainer versions CE 2.44.0 and earlier a high severity vulnerability CVE-2026-72533 was detected. This vulnerability allows authenticated low-privileged users to bypass Docker proxy authorization checks. To address this issue, users should upgrade Portainer to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-72533.

In OpenShift a high severity vulnerability CVE-2026-50237 was detected. This vulnerability allows a namespace tenant to make the console fetch an arbitrary URL, bypassing tenant egress restrictions. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-50237.

In affected versions of Rancher a critical severity vulnerability CVE-2026-44945 was detected. This vulnerability allows an attacker to escalate privileges. To address this issue, users should upgrade Rancher to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-44945.

In koku-metrics-operator component for OpenShift in affected versions a high severity vulnerability CVE-2026-18381 was detected. This vulnerability allows a user to specify an arbitrary upload URL. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-18381.

In Apache ActiveMQ versions before 5.19.9, a high severity vulnerability CVE-2026-59878 was detected. This vulnerability allows a remote unauthenticated attacker to cause a denial-of-service. To address this issue, users should upgrade Apache ActiveMQ to version 5.19.9 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59878.