NetSight
medium4.8

CVE-2026-92611

In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single…

Impact

In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of evaluating later entries, which can cause deny `LogRule` entries to be skipped and allow unauthorized access to another workload's logs.

Affected products

VendorProductAffected versions
EclipseEclipse Ankaios Versions 0.6.0 To
before 1.0.4

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References