Skip to content
VulniPulse
Sign in
Advisory severityHigh8.6Red Hat Linux

High [CVE-2026-103506] SSO secrets readable by low-privileged users when an experimental feature is enabled

This high-severity Red Hat Linux advisory covers CVE-2026-103506 affecting Red Hat Hardened Images, Multicluster Global Hub, Red Hat Advanced Cluster Management for Kubernetes 2.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-103506 Source published Source updated

VulniPulse record published

CVE-2026-103506
Affected products & platforms
Red Hat LinuxRed Hat Enterprise Linux
Open source advisory

Get an email when Red Hat Linux publishes the next one.

VulniPulse checks Red Hat Linux's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.

Start your free month

Summary

An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing authorization). This affects Grafana OSS and Enterprise 13.2 installations with the experimental kubernetesSsoSettingsApi feature toggle enabled, which is disabled by default.

A flaw was found in Grafana. When the experimental Kubernetes Single Sign-On (SSO) settings Application Programming Interface (API) feature toggle is enabled, the service fails to enforce proper authorization checks.

This vulnerability is rated as an Important impact because authenticated users possessing minimal viewer privileges can expose sensitive single sign-on credentials and modify authentication configurations across the platform. Such credential exposure may allow attackers to compromise downstream identity providers or escalate access within the organization.

However, the risk is constrained in standard Red Hat environments because the affected API relies on an experimental feature toggle that remains deactivated by default. Red Hat severity: Important — CVSS 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).

Weakness: CWE-425.

Affected products named by the advisory: Red Hat Hardened Images; Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; and 6 more.

Affected versions
  • 13.2

Official advisory · high-confidence parse· fetched 9 hours ago·verify at source

Fixed versions
  • grafana13-1-main-13.1.8-0.5.hum1
  • grafana12-4-main-12.4.13-0.5.hum1
  • RHSA-2026:91181
  • RHSA-2026:91292

Official advisory · high-confidence parse· fetched 9 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Ensure the experimental `kubernetesSsoSettingsApi` feature toggle is disabled. By default, this feature toggle is inactive. If this feature was manually activated, remove `kubernetesSsoSettingsApi` from the `[feature_toggles]` section in the Grafana configuration file (`grafana.ini`) or from the `GF_FEATURE_TOGGLES_ENABLE` environment variable. Apply the configuration by restarting the service: ``` systemctl restart grafana-server ``` Warning: Restarting the `grafana-server` service will result in a temporary interruption of service for connected users. Additionally, if the toggle was previously enabled, immediately rotate all associated SSO client secrets to prevent unauthorized access from potentially exposed credentials.

Official advisory · high-confidence parse· fetched 9 hours ago·verify at source

More Red Hat Linux advisories

All Red Hat Linux advisories

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Get CVE alertsSee app features

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.