CVE-2026-12269

Summary

The flaw allows an authenticated operator-level user to inject a Keepalived configuration, potentially enabling command execution as root, which can lead to full system compromise.

Exploitability

Exploitation requires an authenticated operator-level user and access to the DDI Central host's HA configuration workflow. The vulnerability is relatively straightforward to exploit given the necessary privileges.

Blast radius

If exploited, the impact is high, as it could lead to complete control over the DDI Central host, including potential data exfiltration, service disruption, and further lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to DDI Central 6.2.0 build 6201 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.