CVE-2026-6213

Summary

A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker.

Affected Software

Weaknesses

• CWE-807: CWE-807 Reliance on untrusted inputs in a security decision
• CWE-290: CWE-290 Authentication bypass by spoofing

Workarounds

Customer can also set trustLocal = false in the gateway.conf as a workaround for this problem if they cannot update to build 1122 or later.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.remotespark.com/view/new.html

• ←Previous
• Next→