CVE-2026-19706

During the ABI bootstrap process, the approve-csr.service on the bootstrap node fails to perform identity validation, leading to the automatic approval and signing of all Certificate Signing Requests (CSRs). An attacker positioned on the install network can exploit this by retrieving an unauthent...

EUVD-2026-120121

During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation. An attacker on the install network can retrieve the unauthenticated Ignition file ports 22623/22624, extract a limited kubeconfig, submit a CSR for CN=system:admin, receive the...