CRITICALCVSS 9.3EPSS 0.3%

CVE-2026-53475

Assisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communication

Published: 2026-06-10
Modified: 2026-08-14
EPSS percentile: 17%
Aliases: GHSA-8g5p-jxp9-457c
Sources: github-advisory

Summary

A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
Go	github.com/kubev2v/assisted-migration-agent	—	0.16.0

Remediation: Upgrade to 0.16.0 or later.

References

https://github.com/advisories/GHSA-8g5p-jxp9-457c

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.