CVE-2026-100103
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the connected P4 Server.
- Published Oct 5, 2026
- CVSS 10.0 critical
- 0.4% chance of exploitation in the next 30 days (EPSS)
- A fix is available