An unauthenticated remote attacker can bypass access controls in the PCP pmproxy by sending crafted requests to the /store endpoint. This enables the attacker to overwrite any PMDA metric, which in turn leads to arbitrary code execution and system takeover. The weakness is a clear example of missing authentication for a critical function (CWE-306) that allows an adversary to execute privileged operations without authentication.

The vulnerability affects Red Hat Enterprise Linux releases 6, 7, 8, 9, 10 and Red Hat OpenShift Container Platform 4. Any system running the pmproxy service is potentially exposed; specific version ranges are not provided, so all affected releases should be assumed vulnerable.

The CVSS score of 7.3 indicates a high severity, yet the EPSS score of < 1 % suggests a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be remote, via network connectivity to the pmproxy service over port 44322/TCP, as the description references unauthenticated requests to the /store endpoint. If exploited, the attacker can gain complete control over the host through arbitrary code execution.