Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-50192 · Microsoft / collected KEV context

EUVD-2026-63684

GHSA-h5gx-45rj-2h5j

GO-2026-5890

cve-program · CVE-2026-50192

• https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j
• https://github.com/kerberos-io/agent/commit/51f1a52e170f21c1264c6de1dc781d5b5e2a5d09

euvd · EUVD-2026-63684

• https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j
• https://github.com/kerberos-io/agent/commit/51f1a52e170f21c1264c6de1dc781d5b5e2a5d09

nvd · CVE-2026-50192

• https://github.com/kerberos-io/agent/commit/51f1a52e170f21c1264c6de1dc781d5b5e2a5d09
• https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j

osv · GHSA-h5gx-45rj-2h5j

• https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j
• https://github.com/kerberos-io/agent/commit/51f1a52e170f21c1264c6de1dc781d5b5e2a5d09
• https://github.com/kerberos-io/agent

osv · GO-2026-5890

• https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j
• https://github.com/kerberos-io/agent/commit/51f1a52e170f21c1264c6de1dc781d5b5e2a5d09

No related operational record is retained in the current change model.