Review reviewHigh

CVE-2026-6734

undici undici, Cryostat 4 on RHEL 9, Red Hat Enterprise Linux 10

Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requests are dispatched through the pool connected to the first origin, regardless of the intended destination. This causes cross-origin request routing: credentials and request data intended for origin B are sent to origin A, responses from the wrong origin are trusted, and HTTPS requests may be silently downgraded to HTTP. Impacted users are applications that use Socks5ProxyAgent (directly or via setGlobalDispatcher...

CVSS: 8.8
EPSS: 0.36%
CISA KEV: Not listed
Published: 2026.06.18

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.36%

Technical severityCVSS 8.8

Vulnerability overview

Affected product and versions

Product: undici undici, Cryostat 4 on RHEL 9, Red Hat Enterprise Linux 10
Affected versions: >= 7.23.0 < 7.26.0, >= 8.0.0 < 8.2.0, >= 7.23.0 < 7.28.0
Fixed versions: 7.28.0, 8.2.0

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that undici undici, Cryostat 4 on RHEL 9, Red Hat Enterprise Linux 10 and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-346, CWE-940