CVE-2026-117681— Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone

Quick assessment

Affected

CVE-2026-117681

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 konflux-ci 中发现了一个安全漏洞。当用户界面代理在缺乏默认服务证书颁发机构（CA）的环境中，自动禁用对内部后端服务连接的传输层安全（TLS）证书验证时，该漏洞可导致权限提升。由于代理会将具有用户伪装权限的集群范围认证令牌附加到这些请求中，因此能够拦截流量的相邻网络攻击者可窃取这些凭证，从而获得对整个集群的完全管理员控制权。

CVSS 8.0 · High EPSS 0.10% · P1 Updated Nov 01, 2026

Possible ATT&CK Techniques 3 AI

T1078 · Valid Accounts T1571 · Non-Standard Port T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
None	None	`0.2.2-rc.2< *`	affected

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone

Source: CVE Program / CVE List V5

Vulnerability Description

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security (TLS) certificate verification for connections to internal backend services in environments lacking a default service certificate authority. Because the proxy attaches a cluster-scoped authentication token with user impersonation rights to these requests, an adjacent network attacker capable of intercepting traffic can capture the credentials to gain full administrative control of the cluster.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

证书验证不恰当

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	-	0.2.2-rc.2 ~ *	-

II. Public POCs for CVE-2026-117681

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-117681

请登录查看更多情报信息。

Other References for CVE-2026-117681 (2)

https://access.redhat.com/security/cve/CVE-2026-117681 vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2563233 issue-tracking x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2026-117681

IV. Related Vulnerabilities

Same weakness: CWE-295