High severity8.8NVD Advisory· Published Jun 20, 2018· Updated Jun 17, 2026
CVE-2018-10841
CVE-2018-10841
Description
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Red Hat/glusterfsv5Range: all
Patches
Vulnerability mechanics
References
6- review.gluster.orgnvdPatchThird Party Advisory
- access.redhat.com/errata/RHSA-2018:1954nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2018:1955nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/11/msg00000.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/201904-06nvdThird Party Advisory
News mentions
0No linked articles in our index yet.