CVE-2026-71468
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Aug 11, 2026
Vendor
unknown
Description
A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub search results, leading to information disclosure.