CVE-2026-84731
CVE-2026-84731 · Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters. Consequently, the server responds with a Set-Cookie header containing a valid JSESSIONID. This session cookie decodes to a JSON Web Token (JWT) granting maximum cluster administrative privileges. Successful exploitation allows the attacker to execute root-level commands on all Controller VMs (CVMs) in the cluster, leading to complete cluster destruction and unauthorized access to VM memory and virtual disks.
CVSS 9.3 · Critique · EPSS 1,3% · Correctif disponible
- Publication
- Mise à jour
Produits et versions concernés
acropolis operating system (aos)
- Versions du logiciel
- ≥ 0, < 7.3.1.18: Concernée; ≥ 7.3.1.18: Non concernée (custom)
- ≥ 7.5, < 7.5.2: Concernée; ≥ 7.5.2: Non concernée (custom)
- ≥ 7.6, < 7.6.0.8: Concernée; ≥ 7.6.0.8: Non concernée (custom)
Mettez à jour vers 7.3.1.18; Mettez à jour vers 7.5.2; Mettez à jour vers 7.6.0.8