RHSA-2026:94608HighCVSS 9.1

Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update

Published
November 3, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (8)

CVE-2026-92615 →CVE-2026-102276 →CVE-2026-102278 →CVE-2026-73501 →CVE-2026-73502 →CVE-2026-77354 →CVE-2026-84445 →CVE-2026-88031 →

📋 Description

CVE-2026-73501 — github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default CVE-2026-73502 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unauthenticated nil-pointer dereference CVE-2026-77354 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via uncontrolled resource consumption in deepObject query parameter decoding CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-88031 — go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs CVE-2026-92615 — flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed CVE-2026-102276 — brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns CVE-2026-102278 — brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

🎯 Affected products29

  • Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:31a4d68ed9a7b6a2f2b6b54eb5dca0b314d5fc15d4da0059dffc501ce8d61a05_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:d3c488630bdc43a49f4bce756bac2f20cd98a1387c6221c1277b6f714bfc5654_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:5da49312e3301012a65e19f34e8f12d40c5dd42c5310646e3769ef37f670b1bc_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9c0a02fb1eb632b660926fe1034d87210248218ef97647dd74fa4b2fb90dcd13_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37854b021ee1944af7a38859d3c4d76cec0a5b74a8fc6f98348eaa0cdcea4d8b_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-api-rhel9@sha256:3e901f98b5f5a4172048f5c037279494541829c98613f29c83e1b1a8f507687f_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:7aea34c77d1280048568e239fadfa71a5ef484e0142959242c92f405235dcbbc_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:7c00493a0bd4afca707d61835048ef73444c8786428ca86c553429f3bb298643_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:3ac520e17e3aa4eff066a76fe88040f935c7b872276f785f51bc561c76b546f9_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:a0b4f9acd08156bd1a5983a39d20e24fc13102ec8fd71d8a37c1bffa625ae969_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:6d1f397323b10ac84d55d6f2f67247629b4e1328a905c7fdb1e65421055909a6_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:e08aa4d527a96e82b638e59ee72ff607241e3fba025fb4355dd45ecf537a3a1a_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:13de1a5772b4b950d18366c0e1e5936662c688e227761088328bdd01427866a1_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:2ad670e1a26a8fb6115158a7ff5d3e76af29dc705b00022c4856b916bf8c5598_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:97b1a92648c0e74049ac37db824fb9ac9706906708fdff6a08b527e92a49885d_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:c1cec7a0579226f5d5568afe5705df8de8013a2cc22944d672f585c75a3ef0f6_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:7d80c2190c2e0f3c2a06501d09988aff8f0d336c2933e79c014ffde00be6d4f5_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:d55d4fd43cf4ba869dfb19745c4d1c6de8799df7041aaf095fdedc2a6beba2ad_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:cbac0b508ea4dd29b046ae0038e6239031758a176c430f7824ac79d3966bdf15_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:e73314bfe4b6b7f9f7d3b65bb2b5e78f5a1441758d9821b4ef21ed46223daefe_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:34b8cdaf7b5cad923b92186afb951ff44c0ad3f3777b8da2508b91a58a0aeef5_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:9f025a260bc66f79629d2e67d5855316883171a3ea6530082cb8571338b704c5_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:2022d52d792598c76be99d7ebcb7c9d5fc1ce56cbce2905229b607a456c8718d_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f82095288e3bf1d93c11c6e163315cb17d628d5e94cde0fb153277e105f483e6_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0af4239d101c682f9418bc9639f13620500a3e8e67add8bc3a3a0d28329fab59_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ce1e7f12b21cc7abcf23dbef5507333750f79f3373a07e67149c9c459acd17bd_amd64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4e8f5403d76fe56c41e6f6b55912571883c33c320e56c6ddf49f5b8daaa6a5f7_arm64 as a component of Red Hat Edge Manager 1.2
  • registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:68528e456c89dad96d0c8a72d039f54680e8631f644a234aa52a47f5d1365348_amd64 as a component of Red Hat Edge Manager 1.2

✅ Remediation

See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2 Workaround: As a partial workaround, administrators can audit their OpenAPI specification files and ensure every content parameter declares an explicit schema for each media type, which prevents the nil-dereference code path from being reached. Workaround: If upgrading go.mongodb.org/mongo-driver to version 1.17.10 (v1) or 2.9.1 (v2) is not immediately possible, the following steps can reduce exposure: - Validate file identifiers before passing them to GridFS operations. Ensure that file IDs supplied by users or external systems are scalar values (e.g., primitive.ObjectID or string) and reject any structured BSON documents or maps. This prevents query operator injection. - Restrict who can supply GridFS file identifiers. Do not allow unauthenticated or low-privilege users to directly control the file ID parameter in GridFS API calls (Delete, OpenDownloadStream, DownloadToStream, etc.). Workaround: There is no application-level workaround that fully eliminates this race condition without a code change. The following deployment-level measures reduce exposure in multi-tenant environments: - Avoid mTLS client certificates for git repositories: If tenant Repository resources do not supply client TLS certificates (httpConfig.tls.clientCertificate), the most sensitive data (client private key material) is absent from the global transport and cannot leak. - Avoid skipServerVerification: Do not set httpConfig.skipServerVerification: true on any Repository resource. This prevents a tenant's InsecureSkipVerify=true from propagating to other tenants' clones, which would otherwise allow an on-path attacker to serve malicious configuration. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (13)