CVE-2026-71472

Name of the Vulnerable Software and Affected Versions acm-search-v2-rhel9 (affected versions not specified)

Description An authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, can inject malicious shell commands or SQL statements. This issue exists because the WORK MEM string provided in the Search CR is not properly validated before being used in a bash script and an SQL query. Successful exploitation may lead to arbitrary code execution within the privileged postgres pod, potentially compromising the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.