{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44724.json"
      }
    ],
    "title": "systeminformation: systeminformation: Command injection via NetworkManager connection profile name",
    "tracking": {
      "current_release_date": "2026-07-04T12:34:22+00:00",
      "generator": {
        "date": "2026-07-04T12:34:22+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "CVE-2026-44724",
      "initial_release_date": "2026-05-27T19:26:28.392000+00:00",
      "revision_history": [
        {
          "date": "2026-05-27T19:26:28.392000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-04T12:32:20+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-07-04T12:34:22+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cryostat 4",
                "product": {
                  "name": "Cryostat 4",
                  "product_id": "cryostat_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cryostat:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cryostat 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Engine for Kubernetes",
                "product": {
                  "name": "Multicluster Engine for Kubernetes",
                  "product_id": "multicluster_engine_for_kubernetes",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_engine"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Engine for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "product": {
                  "name": "Red Hat Advanced Cluster Management for Kubernetes 2",
                  "product_id": "red_hat_advanced_cluster_management_for_kubernetes_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:acm:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Management for Kubernetes 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift AI (RHOAI)",
                "product": {
                  "name": "Red Hat OpenShift AI (RHOAI)",
                  "product_id": "red_hat_openshift_ai_(rhoai)",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_ai"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift AI (RHOAI)"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Developer Hub 1.9",
                "product": {
                  "name": "Red Hat Developer Hub 1.9",
                  "product_id": "Red Hat Developer Hub 1.9",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhdh:1.9::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Developer Hub"
          },
          {
            "category": "product_version",
            "name": "cryostat-openshift-console-plugin-npm",
            "product": {
              "name": "cryostat-openshift-console-plugin-npm",
              "product_id": "cryostat-openshift-console-plugin-npm",
              "product_identification_helper": {
                "purl": "pkg:npm/redhat/cryostat-openshift-console-plugin-npm"
              }
            }
          },
          {
            "category": "product_version",
            "name": "multicluster-engine/console-mce-rhel9",
            "product": {
              "name": "multicluster-engine/console-mce-rhel9",
              "product_id": "multicluster-engine/console-mce-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/console-mce-rhel9?repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/console-rhel9",
            "product": {
              "name": "rhacm2/console-rhel9",
              "product_id": "rhacm2/console-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/console-rhel9?repository_url=registry.redhat.io/rhacm2/console-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-mod-arch-automl-rhel9",
            "product": {
              "name": "rhoai/odh-mod-arch-automl-rhel9",
              "product_id": "rhoai/odh-mod-arch-automl-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-mod-arch-automl-rhel9?repository_url=registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": {
              "name": "rhoai/odh-mod-arch-autorag-rhel9",
              "product_id": "rhoai/odh-mod-arch-autorag-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-mod-arch-autorag-rhel9?repository_url=registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": {
              "name": "rhoai/odh-mod-arch-eval-hub-rhel9",
              "product_id": "rhoai/odh-mod-arch-eval-hub-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-mod-arch-eval-hub-rhel9?repository_url=registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-mod-arch-maas-rhel9",
            "product": {
              "name": "rhoai/odh-mod-arch-maas-rhel9",
              "product_id": "rhoai/odh-mod-arch-maas-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-mod-arch-maas-rhel9?repository_url=registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": {
              "name": "rhoai/odh-mod-arch-mlflow-rhel9",
              "product_id": "rhoai/odh-mod-arch-mlflow-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-mod-arch-mlflow-rhel9?repository_url=registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
                  "product_id": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhdh-hub-rhel9@sha256%3A044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c?arch=amd64&repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9&tag=1782761244"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
                  "product_id": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhdh-rhel9-operator@sha256%3A219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785?arch=amd64&repository_url=registry.redhat.io/rhdh/rhdh-rhel9-operator&tag=1782767215"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
                  "product_id": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhdh-operator-bundle@sha256%3A66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893?arch=amd64&repository_url=registry.redhat.io/rhdh/rhdh-operator-bundle&tag=1782772967"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 as a component of Red Hat Developer Hub 1.9",
          "product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 as a component of Red Hat Developer Hub 1.9",
          "product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 as a component of Red Hat Developer Hub 1.9",
          "product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-openshift-console-plugin-npm as a component of Cryostat 4",
          "product_id": "cryostat_4:cryostat-openshift-console-plugin-npm"
        },
        "product_reference": "cryostat-openshift-console-plugin-npm",
        "relates_to_product_reference": "cryostat_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes",
          "product_id": "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9"
        },
        "product_reference": "multicluster-engine/console-mce-rhel9",
        "relates_to_product_reference": "multicluster_engine_for_kubernetes"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2",
          "product_id": "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9"
        },
        "product_reference": "rhacm2/console-rhel9",
        "relates_to_product_reference": "red_hat_advanced_cluster_management_for_kubernetes_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-automl-rhel9"
        },
        "product_reference": "rhoai/odh-mod-arch-automl-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-autorag-rhel9"
        },
        "product_reference": "rhoai/odh-mod-arch-autorag-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-eval-hub-rhel9"
        },
        "product_reference": "rhoai/odh-mod-arch-eval-hub-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-maas-rhel9"
        },
        "product_reference": "rhoai/odh-mod-arch-maas-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-mlflow-rhel9"
        },
        "product_reference": "rhoai/odh-mod-arch-mlflow-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44724",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "discovery_date": "2026-05-27T21:02:14.837088+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
          ]
        },
        {
          "label": "component_not_present",
          "product_ids": [
            "cryostat_4:cryostat-openshift-console-plugin-npm"
          ]
        },
        {
          "label": "vulnerable_code_not_in_execute_path",
          "product_ids": [
            "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
            "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2482416"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in systeminformation, a Node.js library. This vulnerability allows a local attacker on Linux to inject arbitrary commands. This occurs when an active NetworkManager connection profile name contains shell metacharacters, which are not properly sanitized before being used in shell commands. Successful exploitation can lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "systeminformation: systeminformation: Command injection via NetworkManager connection profile name",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in the `systeminformation` Node.js library allows a local attacker to achieve arbitrary command execution on Linux systems. The vulnerability arises when an active NetworkManager connection profile name contains shell metacharacters, which are not properly sanitized before being processed by the library. Exploitation requires the attacker to have privileges to create or rename NetworkManager connection profiles.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
        ],
        "known_affected": [
          "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-automl-rhel9",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-autorag-rhel9",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-eval-hub-rhel9",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-maas-rhel9",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-mlflow-rhel9"
        ],
        "known_not_affected": [
          "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
          "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
          "cryostat_4:cryostat-openshift-console-plugin-npm",
          "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
          "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44724"
        },
        {
          "category": "external",
          "summary": "RHBZ#2482416",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482416"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44724",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44724"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44724",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44724"
        },
        {
          "category": "external",
          "summary": "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-hvx9-hwr7-wjj9",
          "url": "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-hvx9-hwr7-wjj9"
        }
      ],
      "release_date": "2026-05-27T19:26:28.392000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-30T15:00:33+00:00",
          "details": "For more about Red Hat Developer Hub, see References links",
          "product_ids": [
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:33574"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-automl-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-autorag-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-eval-hub-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-maas-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-mlflow-rhel9"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-automl-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-autorag-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-eval-hub-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-maas-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-mlflow-rhel9"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
            "cryostat_4:cryostat-openshift-console-plugin-npm",
            "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
            "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-automl-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-autorag-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-eval-hub-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-maas-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-mlflow-rhel9"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
            "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
            "cryostat_4:cryostat-openshift-console-plugin-npm",
            "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
            "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-automl-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-autorag-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-eval-hub-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-maas-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-mlflow-rhel9"
          ]
        }
      ],
      "title": "systeminformation: systeminformation: Command injection via NetworkManager connection profile name"
    }
  ]
}