CVE-2026-84731

Summary

A critical authentication bypass vulnerability in Nutanix Prism Element allows unauthenticated attackers to gain full administrative access by exploiting a misconfigured authentication filter that accepts crafted internal management headers. This flaw enables attackers to execute root-level commands on all Controller VMs and access sensitive cluster data.

Exploitability

The vulnerability is highly exploitable with no prerequisites, requiring only network access to the affected API endpoints to craft and include a specific internal management HTTP header.

Blast radius

If exploited, this vulnerability could lead to complete cluster destruction, unauthorized access to VM memory and virtual disks, and full administrative control over all cluster resources.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version is published in the description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.