Skip to content
Redhat Insights-client vulnerabilities
-
redhat insights-client, red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +5 more +7 more
Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege
CVE-2026-71846
6.5 Medium
-
redhat insights-client, red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +5 more +7 more
Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response
CVE-2026-71474
7.1 High
-
redhat insights-client, red hat advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +4 more +6 more
Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url path
CVE-2026-71475
6.8 Medium
-
redhat insights-client, red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +5 more +7 more
Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()
CVE-2026-71845
6.3 Medium
-
redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 more
Insights-client: unsafe handling of temporary files and directories
CVE-2023-3972
Fix available
7.8 High