CVE-2026-53470
Last modified
CVE-2026-53470 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the `/api/v1/sources/{id}/image-url` endpoint. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the `/api/v1/sources/{id}/image-url` endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance (OVA) images belonging to other users. Consequently, the attacker can download OVA images containing sensitive information, such as long-lived agent JSON Web Tokens (JWTs) and source configurations, potentially leading to unauthorized access and modification of the victim's source.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kebev2v | Migration Assessment | < 0.13.5 |
References
- https://access.redhat.com/security/cve/CVE-2026-53470Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2487069Issue Tracking, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-53470?
How severe is CVE-2026-53470?
How do I fix CVE-2026-53470?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-53464ImageMagick is free and open-source software used for editin…4
- CVE-2026-53465ImageMagick is free and open-source software used for editin…6.2
- CVE-2026-53466ImageMagick is free and open-source software used for editin…6.5
- CVE-2026-53467ImageMagick is free and open-source software used for editin…5.3
- CVE-2026-53469A flaw was found in migration-planner. An authenticated user…8.1
- CVE-2026-5347The HM Books Gallery plugin for WordPress is vulnerable to M…5.3
- CVE-2026-53471A flaw was found in migration-planner. The agent-API middlew…7.7
- CVE-2026-53473A flaw was found in migration-planner-ui-app. An attacker ca…5.4
- CVE-2026-53474A flaw was found in migration-planner. A remote authenticate…6.5
- CVE-2026-53475A flaw was found in assisted-migration-agent. The applicatio…7.4
- CVE-2026-53476A flaw was found in assisted-migration-agent. An unauthentic…9.6
- CVE-2026-53478Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…7.2
Are you affected by CVE-2026-53470?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST