SUSE Helm Vulnerabilities Lead to DoS and Credential Exfiltration Risks

Recent updates for SUSE Linux Micro 6.0 and mcphost address multiple vulnerabilities, including CVE-2026-41178, which allows denial-of-service (DoS) attacks through oversized inputs in baggage parsing. Additionally, CVE-2026-48978 enables malicious registries to exfiltrate credentials via hijacked Bearer tokens. The updates affect systems using helm and mcphost, with CVE-2026-37236 allowing HTTP method overrides that can bypass access controls. The vulnerabilities were disclosed between June and September 2026, with patches released on September 6 and 8. Administrators are urged to apply the updates immediately to mitigate risks. The vulnerabilities have varying CVSS scores, indicating differing levels of severity. Current status shows that CVE-2026-41178 and CVE-2026-48978 are particularly concerning due to their potential impact on system integrity and security.

Key Points: • CVE-2026-41178 allows DoS via oversized inputs in baggage parsing. • CVE-2026-48978 enables credential exfiltration through malicious registries. • Immediate patching is recommended for affected SUSE systems.