Skip to content
OpenAdvisories
Medium RHSA-2026:64585 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Sep 22, 2026 · Updated Sep 22, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 loki3.7 0:3.7.7-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 loki3.7-canary 0:3.7.7-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 loki3.7-logcli 0:3.7.7-0.1.hum1

Vulnerabilities 1

  • Medium 5.4
    CVE-2026-10601

    Path traversal in the Tempo and Loki data source plugins

    A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints. Depending on the backend configuration this can expose data source credentials, leak internal responses, or trig…

    Grafana Grafana OSS github.com/grafana/grafana grafana Web / CMS Alpine Go

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-10601
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_64585.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2491359
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-10601
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-10601
  • article
    https://grafana.com/security/security-advisories/cve-2026-10601