CVE-2026-103090 | Google SAM up to 0.1.0-alpha.8 Control Plane Enrollment Status server.go HandleEnrollStatus peer_id missing authentication

SecurityVulns
Yanac

A vulnerability was found in Google SAM up to 0.1.0-alpha.8. It has been declared as critical. Affected by this vulnerability is the function HandleEnrollStatus of the file internal/controlplane/server.go of the component Control Plane Enrollment Status Handler. Such manipulation of the argument peer_id leads to missing authentication.

This vulnerability is listed as CVE-2026-103090. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More