CVE-2026-109359

Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation. Attackers with write access to manifest history can replay a superseded history head so withdrawn workloads obtain...

CVE-2026-109359

Contrast versions 1.8.0 before 1.24.1 are susceptible to an improper verification vulnerability in the Coordinator peer recovery process. The system fails to verify that the serving peer utilizes the same manifest generation, leading to Cross-Manifest Exposure . An attacker with write access to m...

CVE-2026-109359: Insufficient Verification of Data Authenticity

Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation. Attackers with write access to manifest history can replay a superseded history head so withdrawn workloads obtain...