CVE-2026-0532

HighCVSS 8.6/10Last modified Jul 15, 2026

Description

External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker to cause arbitrary file disclosure through a specially crafted credentials JSON payload in the Google Gemini connector configuration. This requires an attacker to have authenticated access with privileges sufficient to create or modify connectors (Alerts & Connectors: All). The server processes a configuration without proper validation, allowing for arbitrary network requests and for arbitrary file reads.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-918

Affected software

VendorProductVersions
ElasticKibana>= 8.15.0, <= 8.19.9; >= 9.0.0, <= 9.1.9; >= 9.2.0, <= 9.2.3
Red HatLogging Subsystem for Red Hat OpenShift—
Red HatLogging Subsystem for Red Hat OpenShift—
Red HatLogging Subsystem for Red Hat OpenShift—
Red HatRed Hat JBoss Enterprise Application Platform 8—
Red HatRed Hat JBoss Enterprise Application Platform Expansion Pack—
Red HatRed Hat OpenShift distributed tracing 3—
Red HatRed Hat OpenStack Platform 16.2—

References

Timeline

Published
Jan 14, 2026
Last modified
Jul 15, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-05338.1A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can triggerCVE-2026-05348.1A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnCVE-2026-05358.1A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSCVE-2026-05367.8A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actCVE-2026-05378.4A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can levCVE-2026-05388.4A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can CVE-2026-05398.5Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by ovCVE-2026-05406.1DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attCVE-2026-05417.3ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privCVE-2026-05429.2ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could CVE-2026-05436.5Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a CVE-2026-05449.8A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.ph