Insights Core: Password redaction flaw exposes LDAP & fence creds
CVE-2026-19391 Published on August 11, 2026

Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives
A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.

NVD

Vulnerability Analysis

CVE-2026-19391 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
NONE
Availability Impact:
NONE

Timeline

Reported to Red Hat.

Made public.

Weakness Type

Cleartext Storage of Sensitive Information

The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere. Because the information is stored in cleartext, attackers could potentially read it. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.


Products Associated with CVE-2026-19391

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Pdrive Lightspeed
 
Red Hat Certifications
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Satellite
 

Affected Versions

Pen Drive Powered by Red Hat Lightspeed: Pen Drive Powered by Red Hat Lightspeed: Red Hat Certification Program for Red Hat Enterprise Linux 9: Red Hat Certification Program for Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 9: Red Hat Satellite 6: Red Hat Satellite 6: Red Hat Satellite 6: Red Hat Satellite 6: