Skip to content
OpenAdvisories
High · 7.5 CVE-2026-120399 EUVD-2026-121145GHSA-9f6q-cw24-v4xv

Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connections

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by redhat

Description

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Edge Manager 1 — —

References