CVE-2026-58080

Summary

The flaw allows an anonymous client to read role-permission metadata, invoke protected methods, or delete protected nodes on servers that rely on role permissions and use the `copy()` method to construct the running configuration, potentially leading to unauthorized access.

Exploitability

Exploitation is moderately hard as it requires the server to use the `copy()` method and have anonymous sessions permitted. Precondition is the presence of role permissions on the server.

Blast radius

If exploited, the impact could be significant, as it allows unauthorized access to protected nodes and methods, potentially leading to data theft or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Eclipse Milo version 1.1.5 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.