PT-2026-75950 · Go · Github.Com/Kubev2V/Assisted-Migration-Agent

Published

2026-06-10

·

Updated

2026-06-10

CVSS v3.1

9.3

Critical

VectorAV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.

Fix

Improper Certificate Validation

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

GHSA-8G5P-JXP9-457C

Affected Products

Github.Com/Kubev2V/Assisted-Migration-Agent