CVE-2026-71469

Summary

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-api pod, resulting in a Denial of Service (DoS).

Affected Software

VendorProductVersion RangeStatus
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787689524 < *unaffected
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787263804 < *unaffected
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141786723845 < *unaffected
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787238618 < *unaffected
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787191668 < *unaffected
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787229541 < *unaffected

Weaknesses

  • CWE-770: Allocation of Resources Without Limits or Throttling

Workarounds

To mitigate this issue, restrict network access to the search-v2-api component within Red Hat Advanced Cluster Management for Kubernetes. Implement network policies to limit incoming connections to only trusted sources that require access to the search API. This will reduce the attack surface for unauthenticated denial-of-service attempts. After applying network policies, ensure that the search-v2-api pod is restarted to apply the new network rules effectively.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References