PT-2026-6446 · Rubygems · Fog-Kubevirt

Published 2026-02-02 · Updated 2026-02-02

OSV

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

GHSA-M3HQ-3QJ8-C5FM

Affected Products

Fog-Kubevirt

References · 11

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/fog-kubevirt/CVE-2026-1530.yml · Exploit
• https://osv.dev/vulnerability/GHSA-m3hq-3qj8-c5fm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1530 · Security Note
• https://github.com/fog/fog-kubevirt/blob/8adb03e07972d6e19a7713ecf2a827aa2cfe4b9e/CHANGELOG.md?plain=1#L11 · Note
• https://github.com/fog/fog-kubevirt/commit/9603d79a239a0f68bedfc679cd1b65fbf6ec4753 · Note
• https://github.com/fog/fog-kubevirt/commit/8371e9ded99f9ec3e74caf2f283836109763e450 · Note
• https://github.com/fog/fog-kubevirt/releases/tag/v1.5.1 · Note
• https://github.com/fog/fog-kubevirt · Note
• https://github.com/fog/fog-kubevirt/pull/168 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2433784 · Note
• https://access.redhat.com/security/cve/CVE-2026-1530 · Note