Medium [CVE-2026-88059] Information Leak via HttpTransferCache Bypass
This medium-severity Red Hat Linux advisory covers CVE-2026-88059 affecting A-MQ Interconnect 1, Red Hat Ceph Storage 4, Red Hat Enterprise Linux 10.
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
A flaw was found in Angular. When Server-Side Rendering (SSR) and hydration are used with a hierarchical HttpClient configured with `withRequestsMadeViaParent`, the `HttpTransferCache` can improperly cache authenticated responses.
This occurs because a child TransferCache stores private response data in TransferState even when a parent HttpClient chain adds credentials and skips the authenticated request.
Consequently, a later unauthenticated or unauthorized visitor could receive cached HTML containing sensitive data from a previously authenticated user, leading to information disclosure. Red Hat severity: Moderate — CVSS 4 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N).
Weakness: CWE-524. Affected Red Hat products: A-MQ Interconnect 1; Red Hat Ceph Storage 4; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; Red Hat OpenStack Platform 16.2; Red Hat Quay 3; Red Hat Single Sign-On 7.
Red Hat does not currently list a fixing RHSA for this CVE.
Affected products named by the advisory: Red Hat package: firefox; Red Hat package: gjs; Red Hat package: grafana; Red Hat package: thunderbird; and 1 more.
Affected products named by the advisory: Red Hat package: mozjs60.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 19 minutes ago·verify at source
- 20.3.28
- 21.2.20
- 22.1.1
Official advisory · high-confidence parse· fetched 19 minutes ago·verify at source
Mitigation
Upgrade to a fixed release: 20.3.28, 21.2.20, 22.1.1. That is the remediation for this advisory.
The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.
Official advisory · high-confidence parse· fetched 19 minutes ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.