CVE-2026-129359: Linux Foundation Magma interceptors.go hard-coded credentials

Q: Which deployments should be treated as affected?

Linux Foundation Magma deployments running version 1.9.0 or earlier should be treated as potentially affected. The issue is associated with orc8r/lib/go/registry/interceptors.go.

Q: Does exploitation require authentication or user interaction?

No. The supplied vector indicates network reachability, low attack complexity, no privileges required, and no user interaction.

Q: Is public exploit code available?

Yes. The disclosure states that an exploit has been released publicly and may be used in attacks.

Q: What is the potential impact of successful exploitation?

The reported impact includes low-level compromise of confidentiality, integrity, and availability. The underlying issue is described as hard-coded credentials.

Published Nov 15, 2026

Updated

A security flaw has been discovered in Linux Foundation Magma up to 1.9.0. The affected element is an unknown function of the file orc8r/lib/go/registry/interceptors.go. Performing a manipulation results in hard-coded credentials. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Linux Foundation Magma<=1.9.0

Event History

Nov 15, 2026

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments should be treated as affected?

Linux Foundation Magma deployments running version 1.9.0 or earlier should be treated as potentially affected. The issue is associated with orc8r/lib/go/registry/interceptors.go.

Does exploitation require authentication or user interaction?

No. The supplied vector indicates network reachability, low attack complexity, no privileges required, and no user interaction.

Is public exploit code available?

Yes. The disclosure states that an exploit has been released publicly and may be used in attacks.

What is the potential impact of successful exploitation?

The reported impact includes low-level compromise of confidentiality, integrity, and availability. The underlying issue is described as hard-coded credentials.

CVE-2026-129359: Linux Foundation Magma interceptors.go hard-coded credentials

Affected Software

Event History

Frequently Asked Questions

Which deployments should be treated as affected?

Does exploitation require authentication or user interaction?

Is public exploit code available?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be treated as affected?

Does exploitation require authentication or user interaction?

Is public exploit code available?

What is the potential impact of successful exploitation?