CVE-2024-41265: Linuxfoundation Cortex

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function.

Affected products

• Linuxfoundation Cortex: up to and including 0.42.1

Published 2024-08-01. Last modified 2026-06-17.