← Back to the live CVE advisory feed

CVE-2026-50152: Product identification pending

Severity

9.1 (CRITICAL)

Affected versions

Before 20.2.4

Fixed version

20.2.4

Patch status

Patched

Published

2026-08-28T00:18:07.073

Modified

2026-08-28T00:18:07.073

Why it matters

This matters because the affected product has SSH, tunneling, or file-management capabilities. Compromise could let an attacker execute commands or interact with managed systems.

Recommended admin actions

• Prioritize validation immediately due to critical CVSS severity.
• Compare installed versions against the affected version range in the advisory.
• Review logs for suspicious activity related to the affected application or component.

Technical summary

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only  `mon allow r` capabilities to read the entire store by sending a single crafted MMonSubscribe message. The config-key store holds sensitive secrets including OSD LUKS disk-encryption passphrases and, on cephadm-managed clusters, the SSH private key that cephadm uses to reach every host in the cluster. Because that key grants root on every node under the default cephadm configuration, a low-privileged read-only account can escalate to full cluster and host compromise. This issue is fixed in versions 20.2.4 and 19.2.6

View the official NVD record for CVE-2026-50152

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.