REDHAT-BUG-2487065: High severity migration-planner vulnerability
Repository: migration-planner Priority: High Location: internal/handlers/v1alpha1/source.go:74
Description: DELETE /api/v1/sources route is wired in openapi.yaml and calls sourceSrv.DeleteSources(ctx) with no filter. The service method runs Unscoped().Exec("DELETE FROM sources") against shared Postgres. No admin gate, no org scoping, no confirmation required.
Security Impact:
Any authenticated user can destroy all customers' sources, agents, and assessments
Single curl command causes total data loss across entire SaaS
Critical availability and integrity catastrophe
Fix Suggestion: Immediate: Hard-disable the handler (return 401 with explanatory message). Long-term: Either drop the route from openapi.yaml and delete SourceStore.DeleteAll, or re-implement as org-scoped bulk delete behind explicit edit permission. See patches/f004.patch.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2487065?
The severity of REDHAT-BUG-2487065 is classified as high with a risk score of 7.
How do I fix REDHAT-BUG-2487065?
To fix REDHAT-BUG-2487065, implement filtering in the DELETE /api/v1/sources route to prevent unintended deletions from the database.
What impact does REDHAT-BUG-2487065 have on the system?
REDHAT-BUG-2487065 allows for the deletion of all sources in the database without any filter, potentially leading to significant data loss.
Is there a workaround for REDHAT-BUG-2487065?
A temporary workaround for REDHAT-BUG-2487065 is to restrict access to the DELETE /api/v1/sources endpoint until a fix is deployed.
When was REDHAT-BUG-2487065 published?
REDHAT-BUG-2487065 was published on June 9, 2026.