{"id":"CVE-2026-92611","title":"In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of evaluating later entries, which can cause deny `LogRule` entr…","summary":"In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of evaluating later entries, which can cause deny `LogRule` entr…","severity":"medium","cvss":4.8,"cvssVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","cwe":["CWE-863","CWE-1023"],"vendor":"Eclipse Foundation","product":"Eclipse Ankaios","affected":["eclipse_ankaios >= 0.6.0 < 1.0.4"],"published":"2026-09-17","updated":"2026-09-18","sourceUpdated":"2026-09-18T19:34:36.657","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92611","references":[{"url":"https://github.com/eclipse-ankaios/ankaios/pull/805","label":"emo@eclipse.org"},{"url":"https://github.com/eclipse-ankaios/ankaios/releases/tag/v1.0.4","label":"emo@eclipse.org"},{"url":"https://github.com/eclipse-ankaios/ankaios/security/advisories/GHSA-qcqx-hx4v-25rg","label":"emo@eclipse.org"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/308","label":"emo@eclipse.org"}],"tags":["nvd","cve.org"],"epss":0.0021,"epssPercentile":0.11531,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-17T12:09:47.528769Z"},"cvssSource":"cna","ingestedAt":"2026-09-17T11:16:16.301Z","slug":"CVE-2026-92611","body":"## Overview\n\nIn Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of evaluating later entries, which can cause deny `LogRule` entries to be skipped and allow unauthorized access to another workload's logs.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":26.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}