Red Hat Security Advisory

RHSA-2026:62537

Red Hat Hardened Images RPMs Security Update

Released 2026-09-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images tempo3.0-3.0.3-0.2.hum1@aarch64, tempo3.0-3.0.3-0.2.hum1@src, tempo3.0-3.0.3-0.2.hum1@x86_64

TI-2026-56054 CVE-2026-81092 · GHSA-8g5x-gj7x-mxgm

LOW 33

mcp-go accepted requests on its HTTP transports without checking the Host header.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00223 Published 2026-08-27 Partial fix · 0.56.0 CWE-346

TI-2026-09116 CVE-2026-10601 · GHSA-9493-h4f5-633x

LOW 24

A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00286 Published 2026-06-22 Partial fix · 1.9.2-0.20260616075434-82ef13993059 CWE-22