CVE-2026-20223: Cisco Secure Workload Internal API Auth Bypass, CVSS 10.0, Unauthenticated Site Admin

Cisco disclosed CVE-2026-20223, a critical auth bypass in the Secure Workload internal REST API. CVSS v3.1 10.0. No password, no social engineering, no preconditions: Site Admin, cross-tenant read/write of policy and logs. Fixed in 3.10.8.3 and 4.0.3.17. No workaround. Patch now.

Cisco disclosed CVE-2026-20223 on 20 Aug 2026: a critical authentication bypass in the Cisco Secure Workload internal REST API. CVSS v3.1 is 10.0. No credentials, social engineering, or preconditions. Reach the internal API endpoint, obtain Site Admin, then read/write network segmentation policy across tenants, disable audit logs, and tamper with compliance reports. 3.9 and earlier must migrate to a fixed release. No workaround exists.

Incident Overview

Cisco Secure Workload (formerly Tetration) is the enterprise zero-trust core for network visibility and microsegmentation enforcement. CVE-2026-20223 is in the platform's internal REST API endpoints. Cisco found it in internal testing and disclosed it as cisco-sa-csw-pnbsa-g8WEnuy. The advisory reports no in-the-wild exploitation and publishes no PoC, file hashes, or C2 domains. The attack surface is unauthenticated Site Admin at CVSS 10.0. SaaS deployments are already auto-patched. On-prem 3.10 and 4.0 require operator intervention.

Cisco Secure Workload covers both cloud and on-prem. All affected cloud instances have been auto-updated. On-prem 3.10 is vulnerable through 3.10.8.2; upgrade to 3.10.8.3. 4.0 is vulnerable through 4.0.3.16; upgrade to 4.0.3.17. 3.9 and earlier have no official patch; migrate to 3.10.8.3 or 4.0.3.17.

Technical Details

Root cause: Secure Workload internal REST API endpoints skip authentication checks. Those endpoints should validate the session before handling the call. The request path just allows the call through. An attacker crafts an API request, reads sensitive data or applies config changes. The server never asks who the caller is.

Exploit conditions are loose:

• Network access: reach the internal REST API path on the Secure Workload management interface; no credentials required

• Credentials: no username, password, MFA, cookie, or session

• User interaction: none

• Attack complexity: low; one API request

• Privilege escalation: successful call yields Site Admin, equivalent to platform max privilege

Site Admin in Secure Workload has max privilege across tenants and workloads: read protected data, modify microsegmentation policy, move laterally, disable audit logs, tamper with compliance reports. In multi-tenant deployments, one API request reaches policy and data belonging to multiple business units or customers. Blast radius is wide.

Impact Assessment

CVE-2026-20223 scores CVSS 10.0: network vector, low attack complexity, no privileges required, no user interaction, changed scope, confidentiality/integrity/availability all High. That combination is rare among published CVEs. It means full remote exploitability plus cross-tenant reach.

From the attacker side, Secure Workload is the control point of enterprise zero trust. It maps topology and holds the keys to microsegmentation. With Site Admin they can:

• Read all tenants' policy and data, including isolated critical-asset classifications for finance, healthcare, and government customers

• Rewrite microsegmentation policy: open channels between previously isolated workloads and enable laterals

• Disable audit logs: subsequent activity leaves no trail

• Tamper with compliance reports: mislead external audit and regulators

The tool meant to shrink the attack surface becomes a single attack amplifier. Cisco states standard hardening does not mitigate CVE-2026-20223; the gap is in API logic. Cisco PSIRT had not observed public exploit code or in-the-wild attacks at advisory publication. Once details leak, exploit code and scanning are a matter of time.

Remediation

Cisco's advisory is explicit: no workaround. Upgrade to 3.10.8.3 or 4.0.3.17. Recommended steps:

• Inventory all Secure Workload clusters: separate SaaS from on-prem. Cloud needs no action. On-prem patch immediately

• Patch on-prem first: 3.10 to 3.10.8.3, 4.0 to 4.0.3.17, 3.9 and earlier migrate to 4.0.3.17 or 3.10.8.3

• Constrain management-interface exposure: confirm the Secure Workload management interface is not internet-reachable; allow only designated management-segment source IPs

• Audit Site Admin operations: last 90 days of Site Admin config changes, policy changes, and cross-tenant access; locate suspicious activity

• Rotate platform credentials and tokens: immediately rotate all API keys, access tokens, and Service Account passwords that touched the platform

• IR readiness: snapshot microsegmentation policy, back up audit logs, freeze a cross-tenant isolation baseline; roll back immediately on suspicion

Detection hunt signals: unauthenticated access on the internal REST API, Site Admin config changes with no matching login session, cross-tenant access patterns, abrupt audit-log interruption, unapproved loosening of microsegmentation rules. These behavioral signals are more stable than IoCs; CVE-2026-20223 requires no known file hash, domain, or IP.

References

• The Security Tool Meant to Guard Your Network Just Became the Way In

• Cisco Security Advisory cisco-sa-csw-pnbsa-g8WEnuy

• NVD CVE-2026-20223