CVE-2026-53475: Assisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communication
(updated )
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.
References
- access.redhat.com/security/cve/CVE-2026-53475
- bugzilla.redhat.com/show_bug.cgi?id=2487232
- github.com/advisories/GHSA-8g5p-jxp9-457c
- github.com/kubev2v/assisted-migration-agent/commit/b940fec9f5032a0801e994054d30e81d64b2942a
- github.com/kubev2v/assisted-migration-agent/pull/268
- nvd.nist.gov/vuln/detail/CVE-2026-53475
Code Behaviors & Features
Detect and mitigate CVE-2026-53475 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →