CVE-2026-71467
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an `Upgrade: websocket` header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the `/federated` endpoint with the `Upgrade: websocket` header. This allows the attacker to bypass authentication and access federated search results across all configured remote managed hubs, leading to information disclosure.
Risk Assessment
An unauthenticated attacker can access sensitive search data from multiple hubs, potentially compromising the organization's information confidentiality.
Recommendation
It is recommended to immediately update search-v2-api to a patched version and implement regression tests for the Upgrade header.
Other vulnerabilities in search-v2-api
Original NVD description (English source)
A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an `Upgrade: websocket` header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the `/federated` endpoint with the `Upgrade: websocket` header. This allows the attacker to bypass authentication and access federated search results across all configured remote managed hubs, leading to information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS