Steeltoe: TLS private keys written to /tmp with default permissions, never deleted

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-50267 · Microsoft / collected KEV context

EUVD-2026-37820

GHSA-rxrh-4j9h-xgg9

cve-program · CVE-2026-50267

• https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-rxrh-4j9h-xgg9
• https://github.com/SteeltoeOSS/Steeltoe/commit/8dd97cc6c4b184121a4bd1f92f9ac16918433471

euvd · EUVD-2026-37820

• https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-rxrh-4j9h-xgg9
• https://github.com/SteeltoeOSS/Steeltoe/commit/8dd97cc6c4b184121a4bd1f92f9ac16918433471

nvd · CVE-2026-50267

• https://github.com/SteeltoeOSS/Steeltoe/commit/8dd97cc6c4b184121a4bd1f92f9ac16918433471
• https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-rxrh-4j9h-xgg9

osv · GHSA-rxrh-4j9h-xgg9

• https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-rxrh-4j9h-xgg9
• https://nvd.nist.gov/vuln/detail/CVE-2026-50267
• https://github.com/SteeltoeOSS/Steeltoe/commit/8dd97cc6c4b184121a4bd1f92f9ac16918433471
• https://github.com/SteeltoeOSS/security-advisories

No related operational record is retained in the current change model.