Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-71299 EUVD-2026-92758GHSA-q53x-4qpm-q53m

Maestro: maestro: rest api write endpoints registered without authentication middleware

Published Oct 5, 2026 · Updated Oct 7, 2026 · Assigned by redhat

Description

A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity issues or a denial of service (DoS).

Affected products

VendorProductAffectedFixed
Red Hat Multicluster Engine for Kubernetes — —

References