CVE-2026-8261

medium Red Hat
CVSS v3 Base Score
6.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
EPSS Score
0.0%
Exploitation probability in 30 days
Top 94% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Confidentiality
Low
Integrity
None
Availability
High
Published: May 11, 2026 (60 days ago)
Last Modified: May 11, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in Squirrel. A local attacker could exploit a heap-based buffer overflow vulnerability, which occurs when a program writes more data to a memory buffer than it can hold. This flaw, specifically affecting the SQFunctionProto::Load function within squirrel/sqobject.cpp, could lead to a denial of service, making the application unavailable, and potentially result in limited information disclosure.

CWE

CWE-120

Affected Products

Deployment Validation OperatorMCP Server for Red Hat OpenShiftMulticluster Global HubOpenShift Developer Tools and ServicesOpenShift LightspeedOpenShift Service Mesh 2OpenShift Service Mesh 3Red Hat Advanced Cluster Management for Kubernetes 2Red Hat Advanced Cluster Security 4Red Hat Ceph Storage 6

References

🔗 bugzilla.redhat.com 🔗 www.cve.org 🔗 nvd.nist.gov 🔗 github.com 🔗 github.com