{"schema":"threatline.record/2","record":{"id":"CVE-2026-84731","aliases":[],"summary":"Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS","details":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters.\n\n\n\nConsequently, the server responds with a Set-Cookie header containing a valid JSESSIONID. This session cookie decodes to a JSON Web Token (JWT) granting maximum cluster administrative privileges. Successful exploitation allows the attacker to execute root-level commands on all Controller VMs (CVMs) in the cluster, leading to complete cluster destruction and unauthorized access to VM memory and virtual disks.","categories":["Unclassified"],"product":"Acropolis Operating System (AOS)","vendor":"Nutanix","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84731","source_modified_at":"2026-10-15T19:14:57.185Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Acropolis Operating System (AOS)","vendor":"Nutanix","versions":[{"status":"affected","version":"0","lessThan":"7.3.1.18","changes":[{"at":"7.3.1.18","status":"unaffected"}],"versionType":"custom"},{"status":"affected","version":"7.5","lessThan":"7.5.2","changes":[{"at":"7.5.2","status":"unaffected"}],"versionType":"custom"},{"status":"affected","version":"7.6","lessThan":"7.6.0.8","changes":[{"at":"7.6.0.8","status":"unaffected"}],"versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84731","source_modified_at":"2026-10-15T19:14:57.185Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Acropolis Operating System (AOS)","ecosystem":null},"version":"7.3.1.18","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84731","source_modified_at":"2026-10-15T19:14:57.185Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Acropolis Operating System (AOS)","ecosystem":null},"version":"7.5.2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84731","source_modified_at":"2026-10-15T19:14:57.185Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Acropolis Operating System (AOS)","ecosystem":null},"version":"7.6.0.8","basis":"first unaffected version stated in the CVE record"}],"cvss":9.3,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.01283,"percentile":0.69885,"score_date":"2026-10-23"},"published_at":"2026-10-15T17:10:29.432Z","modified_at":"2026-10-15T19:14:57.185Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-84731","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-15T19:14:57.185Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-84731","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://download.nutanix.com/alerts/Security_Advisory_0058.pdf","tags":["vendor-advisory"]},{"source":"CVE List","url":"https://portal.nutanix.com/page/documents/list?type=software&filterKey=software&filterVal=AOS","tags":["release-notes"]},{"source":"CVE List","url":"https://www.nutanix.com/support","tags":["x_support"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"total","assessed_at":"2026-10-15T17:29:00.505460Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-15T19:14:57.185Z","content_hash":"6b879d0b5c034c66340a69365de5b94af1f375b95942ccac28f912b18c95873c"}}