Prometheus Azure AD remote write OAuth client secret exposed via config API
Summary
| CVE | CVE-2026-42151 |
|---|---|
| State | PUBLISHED |
| Assigner | GitHub_M |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-05-04 19:16:04 UTC |
| Updated | 2026-09-10 13:20:06 UTC |
| Description | Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3. |
Risk And Classification
Primary CVSS: v3.1 7.5 HIGH from ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.000100000 probability, percentile 0.010590000 (date 2026-05-12)
Problem Types: CWE-200 | CWE-312 | CWE-256 | CWE-200 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor | CWE-312 CWE-312: Cleartext Storage of Sensitive Information | CWE-256 Plaintext Storage of a Password
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | CVSS | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | [email protected] | Secondary | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | Secondary | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | CNA | DECLARED | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Prometheus | Prometheus | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Prometheus | Prometheus | affected < 3.5.3 | Not specified |
| CNA | Prometheus | Prometheus | affected >= 3.6.0, < 3.11.3 | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 10 | unaffected 0:0.152.1-1.el10_2 * rpm | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | unaffected 0:0.152.1-1.el10_0 * rpm | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:0.152.1-1.el9_8 * rpm | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 9.4 Update Services For SAP Solutions | unaffected 0:0.152.1-1.el9_4 * rpm | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | unaffected 0:0.152.1-1.el9_6 * rpm | Not specified |
| ADP | Red Hat | RHEM 1.0 For RHEL 9 | unaffected 0:1.0.3-1.el9em * rpm | Not specified |
| ADP | Red Hat | RHEM 1.1 For RHEL 10 | unaffected 0:1.1.3-1.el10em * rpm | Not specified |
| ADP | Red Hat | RHEM 1.1 For RHEL 9 | unaffected 0:1.1.3-1.el9em * rpm | Not specified |
| ADP | Red Hat | Logging For Red Hat OpenShift 6 | unaffected 1785418915 * rpm | Not specified |
| ADP | Red Hat | Logging For Red Hat OpenShift 6 | unaffected 1785418855 * rpm | Not specified |
| ADP | Red Hat | Logging For Red Hat OpenShift 6 | unaffected 1785418852 * rpm | Not specified |
| ADP | Red Hat | Logging For Red Hat OpenShift 6.2 | unaffected 1784747884 * rpm | Not specified |
| ADP | Red Hat | Logging For Red Hat OpenShift 6.2 | unaffected 1784747816 * rpm | Not specified |
| ADP | Red Hat | Logging For Red Hat OpenShift 6.2 | unaffected 1784747815 * rpm | Not specified |
| ADP | Red Hat | Logging Subsystem For Red Hat OpenShift 6.5 | unaffected 1786645138 * rpm | Not specified |
| ADP | Red Hat | Logging Subsystem For Red Hat OpenShift 6.5 | unaffected 1786645114 * rpm | Not specified |
| ADP | Red Hat | Logging Subsystem For Red Hat OpenShift 6.5 | unaffected 1786645109 * rpm | Not specified |
| ADP | Red Hat | Multicluster Global Hub 1.4.5 | unaffected 1784060681 * rpm | Not specified |
| ADP | Red Hat | Multicluster Global Hub 1.6.5 | unaffected 1784561376 * rpm | Not specified |
| ADP | Red Hat | Multicluster Global Hub 1.7.0 | unaffected 1784906628 * rpm | Not specified |
| ADP | Red Hat | Multicluster Global Hub 1.7.0 | unaffected 1785442872 * rpm | Not specified |
| ADP | Red Hat | OpenShift File Integrity Operator - FIO 1 | unaffected 1786439449 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.11 | unaffected 1787260378 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.11 | unaffected 1787682942 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.11 | unaffected 1787681481 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.11 | unaffected 1787686252 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.11 | unaffected 1787295886 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.11 | unaffected 1787295854 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.11 | unaffected 1787261499 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.11 | unaffected 1787689380 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.13 | unaffected 1787259108 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.13 | unaffected 1787263765 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.13 | unaffected 1787263795 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.13 | unaffected 1787259314 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.13 | unaffected 1787259281 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.13 | unaffected 1787259294 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.13 | unaffected 1787263757 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.13 | unaffected 1787263834 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1787645355 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1786979861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1786976960 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1786979923 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1787147639 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1787147659 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1787147625 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1787147638 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1786976997 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1787147621 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.14 | unaffected 1786979987 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.15 | unaffected 1786547818 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.15 | unaffected 1786547849 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.15 | unaffected 1786547911 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.15 | unaffected 1787238569 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.15 | unaffected 1787613736 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1786909114 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1786909099 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1786908350 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1786908427 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1786909036 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1787645431 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1787222491 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1787222490 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1787233432 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.16 | unaffected 1787222481 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787316467 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787314818 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787230235 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787229601 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787324123 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787324110 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787324118 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787324126 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787229605 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787230287 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787324111 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787230030 * rpm | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2.17 | unaffected 1787229716 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502022 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502465 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502025 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502494 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502401 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502403 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502022 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502023 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502029 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502445 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194638 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194353 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784196588 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784195620 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194309 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194144 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194188 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194653 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194144 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194980 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194347 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194971 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784128388 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784128860 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126780 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127787 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126762 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127762 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126832 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126774 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127791 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127135 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126733 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127775 * rpm | Not specified |
| ADP | Red Hat | Red Hat Hardened Images | unaffected 2.19.0-1.hum1 * rpm | Not specified |
| ADP | Red Hat | Red Hat Hardened Images | unaffected 0.153.0-1.hum1 * rpm | Not specified |
| ADP | Red Hat | Red Hat Hardened Images | unaffected 0.153.0-1.hum1 * rpm | Not specified |
| ADP | Red Hat | Red Hat Multicluster Global Hub 1.5.3 | unaffected 1784562060 * rpm | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4.20 | unaffected 1788206652 * rpm | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4.21 | unaffected 1787559577 * rpm | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4.22 | unaffected 1784125078 * rpm | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4.22 | unaffected 1787573491 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.10 | unaffected 1783750447 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.12 | unaffected 1783751865 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.12 | unaffected 1784353904 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.15 | unaffected 1784351966 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.16 | unaffected 1783955846 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.9 | unaffected 1784125838 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968468 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783960127 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 4-1.4.2 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 4-1.4.3 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1785391426 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783326748 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Custom Metric Autoscaler Operator For Red Hat Openshift | Not specified | Not specified |
| ADP | Red Hat | Custom Metric Autoscaler Operator For Red Hat Openshift | Not specified | Not specified |
| ADP | Red Hat | Custom Metric Autoscaler Operator For Red Hat Openshift | Not specified | Not specified |
| ADP | Red Hat | Custom Metric Autoscaler Operator For Red Hat Openshift | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | Logging Subsystem For Red Hat OpenShift | Not specified | Not specified |
| ADP | Red Hat | Network Observability Operator | Not specified | Not specified |
| ADP | Red Hat | Network Observability Operator | Not specified | Not specified |
| ADP | Red Hat | OpenShift Lightspeed | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 2 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 2 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 2 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 2 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 3 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 3 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 5 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 6 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 6 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 7 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 7 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 8 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 8 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 9 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 10 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Hardened Images | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift GitOps | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift GitOps | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenStack Platform 18.0 | Not specified | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| access.redhat.com/errata/RHSA-2026:40118 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:57191 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:34357 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:36797 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/pull/18587 | [email protected] | github.com | Issue Tracking, Patch |
| access.redhat.com/errata/RHSA-2026:41031 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:37272 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:60441 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:36651 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:47149 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:47952 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:25504 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53412 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:60391 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40945 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:37267 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:63103 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40974 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53415 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:60389 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:43052 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| bugzilla.redhat.com/show_bug.cgi | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | bugzilla.redhat.com | |
| access.redhat.com/errata/RHSA-2026:60386 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:50843 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:60477 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | security.access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40970 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:44622 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:60390 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40262 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53530 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:42852 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/releases/tag/v3.5.3 | [email protected] | github.com | Release Notes |
| access.redhat.com/errata/RHSA-2026:37271 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:25039 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:54288 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40768 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:60387 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:54427 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:60388 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:50874 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:41030 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/pull/18590 | [email protected] | github.com | Issue Tracking, Patch |
| access.redhat.com/errata/RHSA-2026:42146 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:36796 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:34359 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj | [email protected] | github.com | Vendor Advisory |
| access.redhat.com/errata/RHSA-2026:41066 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/releases/tag/v3.11.3 | [email protected] | github.com | Release Notes |
| access.redhat.com/errata/RHSA-2026:41019 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40972 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:25245 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53413 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2026-42151 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:42796 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:56340 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| ADP | 2026-05-04T19:02:26.983Z | Reported to Red Hat. |
| ADP | 2026-05-04T18:12:16.917Z | Made public. |
Solutions
ADP: RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9
ADP: RHSA-2026:36796: RHEM 1.0 for RHEL 9
ADP: RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)
ADP: RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)
ADP: RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)
ADP: RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)
ADP: RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)
ADP: RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5
ADP: RHSA-2026:47952: Logging for Red Hat OpenShift 6.2
ADP: RHSA-2026:50843: Logging for Red Hat OpenShift 6
ADP: RHSA-2026:41030: Multicluster Global Hub 1.4.5
ADP: RHSA-2026:44622: Multicluster Global Hub 1.6.5
ADP: RHSA-2026:47149: Multicluster Global Hub 1.7.0
ADP: RHSA-2026:53530: Multicluster Global Hub 1.7.0
ADP: RHSA-2026:54288: OpenShift File Integrity Operator - FIO 1
ADP: RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11
ADP: RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13
ADP: RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14
ADP: RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15
ADP: RHSA-2026:60389: Red Hat Advanced Cluster Management for Kubernetes 2.15
ADP: RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16
ADP: RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16
ADP: RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17
ADP: RHSA-2026:36651: Red Hat Edge Manager 1.0
ADP: RHSA-2026:40945: Red Hat Edge Manager 1.1
ADP: RHSA-2026:40118: Red Hat Edge Manager 1.1
ADP: RHSA-2026:25039: Red Hat Hardened Images
ADP: RHSA-2026:25504: Red Hat Hardened Images
ADP: RHSA-2026:25245: Red Hat Hardened Images
ADP: RHSA-2026:63103: Red Hat OpenShift Container Platform 4.20
ADP: RHSA-2026:60477: Red Hat OpenShift Container Platform 4.21
ADP: RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22
ADP: RHSA-2026:60441: Red Hat OpenShift Container Platform 4.22
ADP: RHSA-2026:41031: Red Hat Quay 3.10
ADP: RHSA-2026:42146: Red Hat Quay 3.12
ADP: RHSA-2026:43052: Red Hat Quay 3.12
ADP: RHSA-2026:42796: Red Hat Quay 3.15
ADP: RHSA-2026:41066: Red Hat Quay 3.16
ADP: RHSA-2026:40262: Red Hat Quay 3.9
ADP: RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3
ADP: RHSA-2026:40970: Red Hat Trusted Artifact Signer 1.3
ADP: RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3
ADP: RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:50874: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:37267: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:42852: Red Hat multicluster global hub 1.5.3
There are currently no legacy QID mappings associated with this CVE.