Red Hat Product Errata RHSA-2026:26206 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26206 - Security Advisory Overview Updated Packages Synopsis Important: fence-agents security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for fence-agents is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2482734 - CVE-2026-48526 python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens CVEs CVE-2026-48526 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM fence-agents-4.10.0-110.el9_8.3.src.rpm SHA-256: d59d61b5b4c86e8df03381b16cffe43d613aacc5fca1a17009839b1f436acc02 x86_64 fence-agents-aliyun-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: 20fd4ad078c5e9fba3e7d03d127f8e4d7b3d51e4b783f6eda7966eb1f42d1384 fence-agents-all-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: 71caf5387aa1bb6cf53139c01d47e82cc5b92f43cc63623e74c6654bc1a153d0 fence-agents-amt-ws-4.10.0-110.el9_8.3.noarch.rpm SHA-256: aa6481b820c69854957e7d0c6d23d4628bba19cb8c4fdbb8c0d872095b804259 fence-agents-apc-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 0215a93a5ac6fbcee2b4d43c5e9363869077e4c6f72b582612b183d638cbc075 fence-agents-apc-snmp-4.10.0-110.el9_8.3.noarch.rpm SHA-256: f11d1c78e2e281b9e50c3479662b8113c0d31910b3e75efd76c1b20112b20d5c fence-agents-aws-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: 16edf7e95a6ff7f3aacaa9d608b6b6ade93bd9bb539c0d2dab4753b55cbb44a7 fence-agents-azure-arm-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: a5d1f7be8318c3106ea74975d0abb4e70419f1c22fd6769693163fbf6d07fd6f fence-agents-bladecenter-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 788bdf7f8464c4b40e2f7a8204f19bea5ab7e52e2818ba147292d870858391b2 fence-agents-brocade-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 6d74e5dd0a9697fbb675f181930d6ea0458b2219352faa9de7f1acac5085ef04 fence-agents-cisco-mds-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 519dea415fef811da86f394db8e21b40cdef5830ad38167751d8d1460ca786f9 fence-agents-cisco-ucs-4.10.0-110.el9_8.3.noarch.rpm SHA-256: ddb93bf501460cd43b05e3e563833e736c4e6712f6d7efee65836e83ab93b55e fence-agents-common-4.10.0-110.el9_8.3.noarch.rpm SHA-256: dc3f33cd11f66bf2d376d06c295e565cae5cf1ca47cfa06cf21dbe3c5773f67a fence-agents-compute-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: 508b979c41bfbea7e08427701e04f5a48110c64770541f3bb073863fd02a966b fence-agents-debuginfo-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: c69005fd442c626df74e5ca7c8c5f481cfb5ba9ffd6b45ba0347928e0a852f79 fence-agents-debugsource-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: fc7108db42c26714edf661ffbb81b70e0866ddea3dd6583e8722b9d2bcf2d3e4 fence-agents-drac5-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 264c4b7d06188343879216550c702836a6e8c97765df54c03541141818a17416 fence-agents-eaton-snmp-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 72b11553ec8059a99b247ef88029c07d2176fd44b343b763b72b5113da3a78a2 fence-agents-emerson-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 80385ca3eecb354889a4d54f62d388da06f8b1d29d9f509aa5516698ffb1131b fence-agents-eps-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 89df2fa6175e01a621a7cbaf85c63fd5787eef69082040a270df2c85df9ffa34 fence-agents-gce-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: eefdaf11821a9a11b27f776c45593c6814b042c99d425785fe4fdc6937442870 fence-agents-heuristics-ping-4.10.0-110.el9_8.3.noarch.rpm SHA-256: ef154bc97ef949eca8e677659739c2a561d5ff290d18e703e3b0ae2807d5ab7d fence-agents-hpblade-4.10.0-110.el9_8.3.noarch.rpm SHA-256: ed2ffaf19affc29155528b5e752e8ec662806c08da11186decf5e47527feef88 fence-agents-ibm-powervs-4.10.0-110.el9_8.3.noarch.rpm SHA-256: ef79c568a7bcea555f15aaa10b14139f82156e6ab3dd116ac1c18ea194e4ad64 fence-agents-ibm-vpc-4.10.0-110.el9_8.3.noarch.rpm SHA-256: bdf7f8d488fbbb9a0c801156e1c3aa62116f87802eebda68ca3bfae92a4f3460 fence-agents-ibmblade-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 2efb9b4b5c56bbc914ef3eb6932541c6c70e27bf09edb22124b9b88f74c44ee6 fence-agents-ifmib-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 30f8bc12159c6bc63aaeae6a79516ee47d70f84d24ddf5ba9cfc4bd5ed96e7ff fence-agents-ilo-moonshot-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 110aff3bb81de2c421b58a443d9094257771f628b9ac2ce28f8af565d4920a1d fence-agents-ilo-mp-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 09cbef1e7a53d1a4a867e0213f2b4a7c498474bfcf51749fd4d409435346c21f fence-agents-ilo-ssh-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 09377ee25aac05f3bce97716823a26d5c71e8f8407f8cbfbb4da468c8ec50149 fence-agents-ilo2-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 63f3a658b7bba33c09828fcf10c859493c31bf89348d33a6ded84b3afefdca0b fence-agents-intelmodular-4.10.0-110.el9_8.3.noarch.rpm SHA-256: f1a42091eb5090536fb8bb4bf77db8d55a282c7e0aa05bdb537fd536af97c8dd fence-agents-ipdu-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 99acafa52ede63fbb681801443816f2f8ba20f4ce393002a8f126533fbeb26a5 fence-agents-ipmilan-4.10.0-110.el9_8.3.noarch.rpm SHA-256: d30920575f5f68041a81d917c041bcb89f43cef263c966bbe0263086158e6749 fence-agents-kdump-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: e9853880a7b5b75efd9de69f439ed8d7d779b7548b41c355bc990dc588cacd01 fence-agents-kdump-debuginfo-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: d4a5c0ac2a913f47f7c2a7c4496858f136f68c4c91d4226e2065c2bdb52dbfe7 fence-agents-kubevirt-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: c21792de054e6be816c276645060e08a843d73a12498c580760264ad6c974c67 fence-agents-kubevirt-debuginfo-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: 370f31f8aa27e63dd754ce1c0cb010106cb9dd386fc22c2f6c3714be78748db3 fence-agents-lpar-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 9257fefd50d2d6fe1acb49baa9e1b9adb121b4aa8f401848d2ed3632c24475e4 fence-agents-mpath-4.10.0-110.el9_8.3.noarch.rpm SHA-256: f2ceeef771c868f2e23716fdeb65648b870fc44882b5108b4e5620c5c7ecc7bc fence-agents-nutanix-ahv-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 7a24c442da93b11ac72112e70d07d1838598ea6cfff50c38386000a867b2dc04 fence-agents-openstack-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: 8d4f6bfa3ac4ad3aa48c66bcc02e071996da6bedce2975a1d8f25fa19c485cbb fence-agents-redfish-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: c072a80cc7fc141ecf44e16e1ae31a14f69c472bc08e7b2cca42e670c38cb548 fence-agents-rhevm-4.10.0-110.el9_8.3.noarch.rpm SHA-256: a1633fa9a13ab5943d35de8bffdf3c8a9c63d8bac2872c8e79933931d10107a6 fence-agents-rsa-4.10.0-110.el9_8.3.noarch.rpm SHA-256: ac48bc1a65863e2ac13bc8944b2795d227549c435e9cdd21264fe9ece952156c fence-agents-rsb-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 89c1971ec627caaef775a35dfba360c4367b8572556624b629f7f7177cf99592 fence-agents-sbd-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 9642bdd6853f2a0e0a5bae059ce5356e52f0c5c383ecb6041ca689bcdf940438 fence-agents-scsi-4.10.0-110.el9_8.3.noarch.rpm SHA-256: d636cd7c4f47c3ee63274bec2d1576cd4c903326614062aab8b18a18181f7e7e fence-agents-virsh-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 8caf0630d9cbae0cbc70d0d7fb1a3d11bf61209c461cac4121788d849108e7d8 fence-agents-vmware-rest-4.10.0-110.el9_8.3.noarch.rpm SHA-256: 3d5c2b73fef2aa147fd3164a50e6ecc3191b49f9eb49628ef0923b2df9936da5 fence-agents-vmware-soap-4.10.0-110.el9_8.3.noarch.rpm SHA-256: be383e1757685676473492f94a49094393cf583ee70333c3d7dd7f7131792969 fence-agents-wti-4.10.0-110.el9_8.3.noarch.rpm SHA-256: d1eccef90df1d9f5e7126db4d901075ae4aab11aeeeff5b30a004befc2cf113b fence-virt-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: 1c92b2898708f430525c50a8ca8d84563cbd07ed4ac900683649173f670882c3 fence-virt-debuginfo-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: 5003d2b91c1a3dbc343b0af86857b365513b11f5baa87d8e9242d9fee2e600db fence-virtd-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: f9618c810a5817a7043bca97e26386eda334fa46985d4f922e19f6c19557d8b4 fence-virtd-cpg-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: e9b332aa33ab0ad870b279d277cd97fb2c60c9c908f1abd4db9d5c90e333c70e fence-virtd-cpg-debuginfo-4.10.0-110.el9_8.3.x86_64.rpm SHA-256: d1e738f4ea32cd3f8fd3caa15213cecd31baa27d54038f7c44e0
An authentication bypass vulnerability (CVE-2026-48526, CVSS 7.4 HIGH) in the PyJWT library allows an attacker to forge JSON Web Tokens, potentially compromising systems using the fence-agents package for cluster power management. The vulnerability affects PyJWT versions prior to 2.13.0. A fix is available by updating the fence-agents package for RHEL 9, which includes PyJWT 2.13.0.