PT-2026-48449 · Undefined · Undefined

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-53476

NVD

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-53476

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-53476 · Security Note
• https://access.redhat.com/security/cve/CVE-2026-53476 · Note
• https://github.com/kubev2v/assisted-migration-agent/pull/256 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2487233 · Note