← CVE catalog

CVE-2026-92611

Unrated

Published 2026-09-17 ยท last changed 2026-09-18

The fix

We hold no Microsoft remediation data for CVE-2026-92611, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of evaluating later entries, which can cause deny `LogRule` entries to be skipped and allow unauthorized access to another workload's logs.

Sources