CVE-2026-115732
Description
Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and, in Puppet Enterprise, access to certificate-authority administration and remote command execution on managed nodes. Exploitation requires a certificate with a colliding name, which the certificate authority issues by approval or autosign.
How to fix
- Perforce Puppet Enterprise2023.8.13, 2025.12.1, 2026.0.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Perforce Puppet Enterprise | 2023.8.0 ≤ v < 2023.8.13, 2025.0.0 ≤ v < 2025.12.1, 2026.0.0 ≤ v < 2026.0.1 | 2023.8.13, 2025.12.1, 2026.0.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.