by Kastro
Paper/Archive/CVE-2026-53476

CVE-2026-53476

redhat — Assisted-migration-agent: vddk tarball chained-symlink arbitrary file write

EPSS 0.3%CVSS 9.6
critical.is priorityof 100
33
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 21.4.214 × 204.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.

Affected

ProductAffectedFixed inSource
assisted-migration-agent< bcae0438ad8386321a300413d71c982a11b7b5b7bcae0438ad8386321a300413d71c982a11b7b5b7CNA

Scores by source

redhat (CNA)9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refaccess.redhat.com/security/cve/CVE-2026-53476refbugzilla.redhat.com/show_bug.cgi?id=2487233refgithub.com/kubev2v/assisted-migration-agent/pull/256