Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind SSRF, substitute and cache malicious JWKS keys, or disclose ServiceAccount tokens to external hosts. Version 1.8.6 blocks cross-host redirects, restricts token injection, and restricts local token loading. No known workarounds are available.

The version of runfinch-finch installed on the remote host is prior to 1.17.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-137 advisory.

    On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root     when the final path component of the a path is a symbolic link and the path ends in /. For example,     'root.Open(symlink/)' will open symlink even when symlink is a symbolic link pointing outside of the     root. (CVE-2026-39822)

    Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a     disclosure of pre-shared key identities in the unencrypted client hello. (CVE-2026-42505)

    A flaw was found in Rekor. The `Package.Unmarshal()` function, which processes Alpine Package Keep (APK)     files, decompresses gzip streams without limiting the total decompressed size. A remote attacker can     exploit this by crafting a malicious APK file with a high compression ratio, causing the server to consume     excessive memory. This leads to a Denial of Service (DoS) through an out-of-memory (OOM) error, and can be     triggered via unauthenticated API endpoints. (CVE-2026-48702)

    A flaw was found in Fulcio's OpenID Connect (OIDC) Discovery client. This vulnerability allows a remote     attacker to perform Server-Side Request Forgery (SSRF) by redirecting discovery requests to internal     systems. Additionally, an attacker can manipulate the JSON Web Key Set (JWKS) Uniform Resource Identifier     (URI) to poison the verifier cache with malicious keys, enabling the validation of attacker-controlled     signatures. Furthermore, the flaw can lead to the leakage of Kubernetes ServiceAccount tokens to third-     party hosts through cross-host redirects or misconfigured MetaIssuers, potentially exposing sensitive     cluster credentials. (CVE-2026-49478)

    A flaw was found in Sigstore Timestamp Authority. An unauthenticated remote attacker can exploit this     vulnerability by sending requests with arbitrary HTTP paths and methods. This leads to the creation of an     excessive number of unique metric labels, causing unbounded memory growth and a denial of service (DoS)     condition on the server. This issue is a type of Improper Restriction of Resource Consumption (CWE-770).
    (CVE-2026-49835)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2023 advisory.

    On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root     when the final path component of the a path is a symbolic link and the path ends in /. For example,     'root.Open(symlink/)' will open symlink even when symlink is a symbolic link pointing outside of the     root. (CVE-2026-39822)

    Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a     disclosure of pre-shared key identities in the unencrypted client hello. (CVE-2026-42505)

    A flaw was found in Rekor. The `Package.Unmarshal()` function, which processes Alpine Package Keep (APK)     files, decompresses gzip streams without limiting the total decompressed size. A remote attacker can     exploit this by crafting a malicious APK file with a high compression ratio, causing the server to consume     excessive memory. This leads to a Denial of Service (DoS) through an out-of-memory (OOM) error, and can be     triggered via unauthenticated API endpoints. (CVE-2026-48702)

    A flaw was found in Fulcio's OpenID Connect (OIDC) Discovery client. This vulnerability allows a remote     attacker to perform Server-Side Request Forgery (SSRF) by redirecting discovery requests to internal     systems. Additionally, an attacker can manipulate the JSON Web Key Set (JWKS) Uniform Resource Identifier     (URI) to poison the verifier cache with malicious keys, enabling the validation of attacker-controlled     signatures. Furthermore, the flaw can lead to the leakage of Kubernetes ServiceAccount tokens to third-     party hosts through cross-host redirects or misconfigured MetaIssuers, potentially exposing sensitive     cluster credentials. (CVE-2026-49478)

    A flaw was found in Sigstore Timestamp Authority. An unauthenticated remote attacker can exploit this     vulnerability by sending requests with arbitrary HTTP paths and methods. This leads to the creation of an     excessive number of unique metric labels, causing unbounded memory growth and a denial of service (DoS)     condition on the server. This issue is a type of Improper Restriction of Resource Consumption (CWE-770).
    (CVE-2026-49835)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC)     identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes     ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind     SSRF, substitute and cache malicious JWKS keys, or disclose ServiceAccount tokens to external hosts.
    Version 1.8.6 blocks cross-host redirects, restricts token injection, and restricts local token loading.
    No known workarounds are available. (CVE-2026-49478)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC)
    identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes
    ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind
    SSRF, substitute and cache malicious JWKS keys, or disclose ServiceAccount tokens to external hosts.
    Version 1.8.6 blocks cross-host redirects, restricts token injection, and restricts local token loading.
    No known workarounds are available. (CVE-2026-49478)

ID	Name	Product	Family	Type	Severity
332018	Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2026-137 (ALASDOCKER-2026-137)	Nessus	Amazon Linux Local Security Checks	Local	high
332009	Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-2023)	Nessus	Amazon Linux Local Security Checks	Local	high
330127	Linux Distros Unpatched Vulnerability : CVE-2026-49478	Nessus	Misc.	Local	high
444132	SCA: security update for github.com/sigstore/fulcio (GHSA-f5mr-q85p-6hh6)	Tenable Cloud Security	SCA Checks	Local	high
444132	SCA: security update for github.com/sigstore/fulcio (GHSA-f5mr-q85p-6hh6)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-49478

high

Tenable Plugins

high

high

high

high

high