Red Hat Security Advisory

RHSA-2026:26072

Kiali 1.73.32 for Red Hat OpenShift Service Mesh 2.6

Released 2026-06-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8, registry.redhat.io/openshift-service-mesh/kiali-rhel8

TI-2026-08149 CVE-2026-9277 · GHSA-w7jw-789q-3m8p

MEDIUM 43

shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00793 Published 2026-05-22 Partial fix · 1.8.4 CWE-77