CVE-2026-115732

Puppet Server is vulnerable to a certificate name authorization bypass due to incorrect matching logic in the trapperkeeper-authorization component. This allows a client holding a CA-signed certificate with a name that extends or shortens an authorized hostname to be authorized as that host. Succ...