CVE-2021-4178: Red Hat A-Mq Streams

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.

Affected products

• Red Hat A-Mq Streams: version 2.0.1 only
• Red Hat Build Of Quarkus: version 2.2.5 only
• Red Hat Descision Manager: version 7.0 only
• Red Hat FABRIC8-Kubernetes: from 5.0.1, before 5.0.3 (fixed in 5.0.3); from 5.1.0, before 5.1.2 (fixed in 5.1.2); from 5.2.0, before 5.3.2 (fixed in 5.3.2); from 5.5.0, before 5.7.4 (fixed in 5.7.4); from 5.9.0, before 5.10.2 (fixed in 5.10.2); from 5.11.0, before 5.11.2 (fixed in 5.11.2); …
• Red Hat Fuse: version 7.11 only
• Red Hat Integration Camel K: affected versions not specified
• Red Hat Integration Camel Quarkus: version 2.2.1 only
• Red Hat Openshift Application Runtimes: affected versions not specified
• Red Hat Process Automation: version 7.0 only

Published 2022-08-24. Last modified 2026-06-17.