by Kastro CVE-2026-41607
Apache Software Foundation Apache Thrift — Apache Thrift: C++ JSON OOB read
Description · from the CVE record
Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
Affected
ProductAffectedFixed inSource
Apache Thrift< 0.23.00.23.0CNA
Multicluster Global Hub 1.3.4see advisory1779212259redhat-SADP
Multicluster Global Hub 1.4.5see advisory1779579439redhat-SADP
Multicluster Global Hub 1.6.5see advisory1780167118redhat-SADP
Red Hat Advanced Cluster Management for Kubernetes 2.14see advisory1782693386redhat-SADP
Red Hat Advanced Cluster Management for Kubernetes 2.15see advisory1780677003redhat-SADP
Red Hat multicluster global hub 1.5.3see advisory1778867753redhat-SADP
Red Hat OpenShift distributed tracing 3.9.3see advisory1778158391redhat-SADP
Red Hat OpenShift distributed tracing 3.9.3see advisory1778158343redhat-SADP
Red Hat OpenShift distributed tracing 3.9.3see advisory1778158374redhat-SADP
OpenShift Service Mesh 2see advisory–redhat-SADP
Red Hat AI Inference Serversee advisory–redhat-SADP
Scores by source
redhat-SADP (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADP6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial