Description
A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Edge Manager 1 | — | — |
References
- https://access.redhat.com/security/cve/CVE-2026-120399 vdb-entry
- RHBZ#2564888 issue-tracking