CVE-2026-71297
5.4 MEDIUMPublished 2026-10-05 · Updated 2026-10-06
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forged agent status, which can compromise data integrity.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-306
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2025-70516
- MEDIUMCVE-2026-100192PoC
- UNSCOREDCVE-2026-100406PoC
- HIGHCVE-2026-100672PoC
- HIGHCVE-2026-100746PoC
- MEDIUMCVE-2026-100876PoC
- MEDIUMCVE-2026-100903PoC
- MEDIUMCVE-2026-101004
Related by shared AI tags and CWE weakness class. Browse the full archive.