CVE-2026-92982: Migration Toolkit for Applications 8 (exact versions not specified); +11 more affected products

Affected technology

Migration Toolkit for Applications 8 · Exact affected versions not specified by the source
Red Hat

Migration Toolkit for Containers · Exact affected versions not specified by the source
Red Hat

Migration Toolkit for Virtualization · Exact affected versions not specified by the source
Red Hat

OpenShift Service Mesh 3 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2 · Exact affected versions not specified by the source
Red Hat

Red Hat Ansible Automation Platform 2 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Virtualization 4 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenStack Platform 16.2 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenStack Platform 17.1 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenStack Platform 18.0 · Exact affected versions not specified by the source
Red Hat

Service Telemetry Framework 1.5 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. Vendor/CNA’s CVSS 3.1 assessment (base score 8.5/10) rates confidentiality, integrity and availability impact as high.