Ceph Monitor: any read-only CephX user can dump the config-key store, including cephadm's cluster-wide SSH key

Impact

A CephX identity holding nothing more than mon allow r can send one crafted MMonSubscribe message and read the entire monitor config-key store. That store holds OSD LUKS disk-encryption passphrases and, on cephadm-managed clusters, the SSH private key cephadm uses to log into every host in the cluster - which is root by default. On a GPU fleet where Ceph backs the shared dataset and checkpoint tier, this turns any low-privileged read-only key handed to a tenant job, a monitoring agent, or a CSI provisioner into root on every storage host, and hands over the keys needed to decrypt OSD media offline. Credentials distributed to many clients are hard to recall, so rotation after exposure is a fleet-wide job, not a single change.

Who can reach it

Any authenticated CephX client that can reach the monitors and holds at least mon allow r. No elevated capability and no local access required.

What to do

Upgrade to Ceph 20.2.4 or 19.2.6 and restart the monitor daemons; this is a rolling restart of the mon quorum and does not require draining GPU nodes. Because the SSH key and LUKS passphrases may already have been read by anyone who held a read-only key, treat them as exposed: rotate the cephadm SSH key and review which clients hold mon allow r after upgrading. Until you can upgrade, audit and trim read-only CephX capabilities handed to tenants and side-car services.

References

Related entries

• NVIDIA AIStore: token-revocation endpoint accepts unauthenticated revocation listsCVE-2026-65173 · NVIDIA AIStore (token-revocation endpoint)Critical
• Apache Airflow FAB provider: Azure AD id_token issuer and audience unchecked, any tenant can log inCVE-2026-75156 · Apache Airflow FAB provider (Azure AD OAuth id_token issuer/audience validation)Critical
• Airflow Keycloak provider: Keycloak tokens from unsigned cookies are not bound to the session identityCVE-2026-76186 · Apache Airflow Keycloak provider (session identity vs. Keycloak access/refresh token binding)Critical
• Fortra BoKS Manager: command injection in crlserver gives root on the BoKS Master via a crafted CRL URLCVE-2026-79898 · Fortra BoKS Manager crlserver (CRL URL handling)Critical
• Airflow FAB provider: password change through the Admin PATCH endpoint does not evict existing sessionsCVE-2026-86462 · Apache Airflow FAB provider (Admin user-edit PATCH endpoint, session invalidation)Critical
• Apache Airflow: Core API logout does not revoke bearer tokens, so a stolen token outlives the sessionCVE-2026-86473 · Apache Airflow Core API (logout endpoint, bearer-token revocation)Critical