Vulnerability details
CVE-2026-6322
Red Hat Confidential Compute AttestationRed Hat Network Observability OperatorRed Hat OpenShift LightspeedRed Hat OpenShift PipelinesRed Hat OpenShift ServerlessRed Hat Ansible Automation Platform 2
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
CVSS 3.1
7.5High
Official description
fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI's authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions <= 3.1.1 are affected. Update to 3.1.2 or later.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (openjs) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | Confidential Compute Attestation | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Network Observability Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Dev Spaces | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Openshift Data Foundation 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Self-service automation portal 2 | All | CVEProject cvelistV5 (CNA) |
| fast-uri | fast-uri | v < 3.1.2 | CVEProject cvelistV5 (CNA) |
References and advisories
46- https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc
- https://cna.openjsf.org/security-advisories.html
- https://access.redhat.com/security/cve/CVE-2026-6322 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2466684 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6322.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34160 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34342 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37385 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34374 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42142 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41951 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36754 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26234 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29197 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61783 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60855 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43038 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57487 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54555 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34766 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37628 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29800 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34770 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37186 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29834 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29795 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56431 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56366 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57013 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56968 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56928 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33683 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30076 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54395 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28571 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-05-05
- Last updated
- 2026-09-10
- State
- Published
- Assigner (CNA)
- openjs
Exploit prediction (EPSS)
0.51%
Probability of exploitation in 30 days
43.9%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-436Interpretation Conflict
- CWE-140Improper Neutralization of Delimiters