Linode investigates security incident tied to CVE-2026-98432

Cloud provider Linode has posted a notice on its status page titled Customer Security Advisory: CVE-2026-98432. It concerns a recently disclosed vulnerability that allows remote code execution.

The first message appeared on October 30, 2026, at 18:10 UTC. Writing on behalf of Akamai, which owns Linode, it says the company is aware of the published vulnerability. Its staff are investigating, taking "the appropriate mitigation actions," and monitoring the platform in parallel.

Customers who have questions or are experiencing an impact are asked to open a support ticket through the Linode control panel.

What is known so far

At 21:18 UTC the same day, the status was updated. The company said the investigation is ongoing, the relevant subject matter experts are engaged, and further updates on mitigation will be posted as progress is made.

The notices offer no further detail. They do not say which component is affected, whether customer data or virtual machines have been compromised, or whether users need to take any action themselves. The advisory also contains no technical description of CVE-2026-98432.

On Hacker News, the post gathered 115 points and 65 comments. Until an official explanation arrives, Linode customers can only watch the status page, where updates are available by email, text message, Slack, webhooks, or RSS.

Source: Hacker News