CVE Catalog
CVE-2026-66379
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.20%
11th percentile - higher than 11% of all known CVEs
Summary
An authenticated user may view private Puppet module metadata without repository read access.
Risk Assessment
This could expose sensitive information about Puppet modules, violating access control.
Recommendation
Review and fix repository read permission configuration for Puppet modules.
Original NVD description (English source)
An authenticated user may view private Puppet module metadata without repository read access.