CVE-2026-92615

A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs it into go-git's process-global client.Protocols map via gitclient.InstallProtocol("https", ...). Because the worker renders devices for multiple organizations concurrently from a shared goroutine pool, whichever tenant's repository configuration is written last wins for all in-flight git.Clone calls. This race condition can cause one tenant's TLS settings, including InsecureSkipVerify or mTLS client credentials, to leak into another tenant's git operations.

• CWE-413

• https://access.redhat.com/security/cve/CVE-2026-92615
• https://bugzilla.redhat.com/show_bug.cgi?id=2518323

Published

Sep 16, 2026

Last Modified

Sep 17, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92602TDuck survey form through version 5.3 fails to validate webh…7.1
• CVE-2026-92603ContiNew Admin through 4.1.0 contains an authorization bypas…6.5
• CVE-2026-92604Scirius through 3.8.0 contains an arbitrary file write vulne…8.1
• CVE-2026-92605IRIS through 2.4.29 fails to properly validate case authoriz…6.5
• CVE-2026-9261Use of weak SSH cryptographic algorithms in Canon EOS Networ…9.8
• CVE-2026-92611In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule:…4.8
• CVE-2026-92616FileRise before version 3.28.0 contains a privilege escalati…6.8
• CVE-2026-9262Use of a non-secure protocol as the default FTP configuratio…7.5
• CVE-2026-92625Control iD iDSecure versions prior to 4.8.3.0 are affected b…7.5
• CVE-2026-92626Control iD iDSecure versions prior to 4.8.3.0 are affected b…7.5
• CVE-2026-92627A heap-use-after-free vulnerability exists in H5T__conv_f_f(…4.6
• CVE-2026-9263The Zephyr Bluetooth controller ISO Adaptation Layer (subsys…8.1