Critical severity9.4NVD Advisory· Published Jul 20, 2026· Updated Aug 26, 2026
CVE-2026-16242
CVE-2026-16242
Description
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
19- access.redhat.com/errata/RHSA-2026:46885nvd
- access.redhat.com/errata/RHSA-2026:47388nvd
- access.redhat.com/errata/RHSA-2026:47728nvd
- access.redhat.com/errata/RHSA-2026:47735nvd
- access.redhat.com/errata/RHSA-2026:47949nvd
- access.redhat.com/errata/RHSA-2026:47953nvd
- access.redhat.com/errata/RHSA-2026:47974nvd
- access.redhat.com/errata/RHSA-2026:48284nvd
- access.redhat.com/errata/RHSA-2026:48657nvd
- access.redhat.com/errata/RHSA-2026:48670nvd
- access.redhat.com/errata/RHSA-2026:48676nvd
- access.redhat.com/errata/RHSA-2026:48693nvd
- access.redhat.com/errata/RHSA-2026:48699nvd
- access.redhat.com/errata/RHSA-2026:50758nvd
- access.redhat.com/errata/RHSA-2026:56789nvd
- access.redhat.com/errata/RHSA-2026:56912nvd
- access.redhat.com/security/cve/CVE-2026-16242nvd
- bugzilla.redhat.com/show_bug.cginvd
- github.com/openshift/hypershift/pull/9031nvd
News mentions
0No linked articles in our index yet.