Medium [CVE-2026-53632] Credential compromise via NTLMv2 password hash leak through UNC path access
This medium-severity Red Hat Linux advisory covers CVE-2026-53632 affecting Red Hat OpenShift AI (RHOAI).
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths.
When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking.
This vulnerability is fixed in 2.14.1. This component, used in Node.js to open files, can be tricked into accessing arbitrary paths, including Windows Universal Naming Convention (UNC) paths.
Red Hat rates this issue as having Moderate impact for Red Hat OpenShift AI MLflow images on Windows client scenarios. Linux-based Red Hat Enterprise Linux AI bootc images are not affected because launch-editor UNC-path behavior is Windows-specific.
Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N). Weakness: CWE-73.
Affected Red Hat products: Red Hat OpenShift AI (RHOAI).
- < 2.14.1
Official advisory · high-confidence parse· fetched 15 days ago·verify at source
Mitigation checklist
- Avoid using launch-editor on Windows clients against untrusted URLs. Upgrade when updated packages are available.
Official advisory · high-confidence parse· fetched 15 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.