Vulnerability details
CVE-2026-42151
Red Hat File Integrity OperatorRed Hat Logging Subsystem for Red Hat OpenShiftRed Hat Ceph Storage 5Red Hat Ceph Storage 6Red Hat Ceph Storage 7Red Hat Ceph Storage 8
Prometheus Azure AD remote write OAuth client secret exposed via config API
CVSS 3.1
7.5High
Official description
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | File Integrity Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 5 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 6 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 6 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 7 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 7 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 8 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 8 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift GitOps | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift GitOps | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | All | CVEProject cvelistV5 (CNA) |
| prometheus | prometheus | < 3.5.3 | CVEProject cvelistV5 (CNA) |
| prometheus | prometheus | >= 3.6.0, < 3.11.3 | CVEProject cvelistV5 (CNA) |
References and advisories
56- https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj x_refsource_CONFIRM
- https://github.com/prometheus/prometheus/pull/18587 x_refsource_MISC
- https://github.com/prometheus/prometheus/pull/18590 x_refsource_MISC
- https://github.com/prometheus/prometheus/releases/tag/v3.11.3 x_refsource_MISC
- https://github.com/prometheus/prometheus/releases/tag/v3.5.3 x_refsource_MISC
- https://access.redhat.com/security/cve/CVE-2026-42151 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2466507 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53413 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34357 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53412 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53415 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34359 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56340 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47952 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50843 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41030 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:44622 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47149 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53530 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54288 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60387 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60390 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60388 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54427 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60389 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60391 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57191 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60386 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25039 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25504 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25245 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:63103 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60477 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40768 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60441 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40974 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40970 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40972 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36797 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37272 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50874 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37267 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37271 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42852 vendor-advisoryx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-05-04
- Last updated
- 2026-09-10
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.35%
Probability of exploitation in 30 days
29%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor
- CWE-312Cleartext Storage of Sensitive Information
- CWE-256Plaintext Storage of a Password