6.5Medium
CVE-2026-62147Tempo-operator: tempo operator: query rbac bypass
Description
The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing an authenticated user to read span attributes belonging to other tenants' namespaces.
Weakness (CWE):
CWE-863
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| openshift distributed tracing | 3.10 | — | |
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 | all versions |
References and patches
- RHSA-2026:33612 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-62147 vdb-entry
- RHBZ#2499635 issue-tracking