Kubev2V Assisted Migration Agent vulnerabilities

2 vulnerabilities

Known vulnerabilities in Kubev2V Assisted Migration Agent, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2026-53475github.com/kubev2vassisted-migration-agent+1
EPSS score
0.50%
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.9.6CVE-2026-53476github.com/kubev2vassisted-migration-agent+1
EPSS score
0.43%
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.