CVE-2026-53476

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.

CVSS v3 9.6 CRITICAL

9.6^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2026-53476	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487233	Issue Tracking Third Party Advisory
https://github.com/kubev2v/assisted-migration-agent/pull/256	Patch

Configurations

Configuration 1 (hide)

cpe:2.3:a:kubev2v:assisted_migration_agent:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-06-10 15:16

Updated : 2026-06-17 10:57

NVD link : CVE-2026-53476

Mitre link : CVE-2026-53476

CVE.ORG link : CVE-2026-53476

JSON object : View

Products Affected

kubev2v

assisted_migration_agent

CWE

CWE-59

Improper Link Resolution Before File Access ('Link Following')

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-53476", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53476", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-10T14:44:17.152878Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"versions": [{"status": "affected", "version": "0", "lessThan": "bcae0438ad8386321a300413d71c982a11b7b5b7", "versionType": "git"}], "packageName": "assisted-migration-agent", "collectionURL": "https://github.com/kubev2v/assisted-migration-agent", "defaultStatus": "unaffected"}]}], "published": "2026-06-10T15:16:42.220", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-53476", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487233", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://github.com/kubev2v/assisted-migration-agent/pull/256", "tags": ["Patch"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-59"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance."}], "lastModified": "2026-06-17T10:57:57.347", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kubev2v:assisted_migration_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7C309DF-0E2C-4AC7-A91D-6252C204C5A6", "versionEndExcluding": "2026-06-07"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}