Assisted Migration Agent vulnerabilities

2 known vulnerabilities in Assisted Migration Agent from Kubev2v. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  Assisted Migration Agent: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-53476Jun 10, 2026Kubev2v

  A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and w

• 7.4 High severity

  Assisted Migration Agent: Improper Certificate Validation

  CVE-2026-53475Jun 10, 2026Kubev2v

  A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administ