Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

CVE-2026-66792

Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

CRITICAL 9.9

At a glance

Source
NVD
EPSS
EPSS 0.69 % · percentile 53 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Awaiting Analysis

Description

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.

Weaknesses (CWE)

  • CWE-863 — Incorrect Authorization

References

Scores

VersionScoreVectorScored by
CVSS 3.1CRITICAL 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hredhat
CVSS 3.1CRITICAL 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HNVD · secalert@redhat.com (Secondary)

European references

Affected products

ProductVersions
Red Hat · Multicluster Global Hub 1.4.9unaffected 1788355439 < *
Red Hat · Multicluster Global Hub 1.4.9unaffected 1788355599 < *
Red Hat · Multicluster Global Hub 1.4.9unaffected 1788355417 < *
Red Hat · Multicluster Global Hub 1.5.8unaffected 1789515408 < *
Red Hat · Multicluster Global Hub 1.5.8unaffected 1789515288 < *
Red Hat · Multicluster Global Hub 1.5.8unaffected 1789478830 < *
Red Hat · Multicluster Global Hub 1.6.6unaffected 1790085494 < *
Red Hat · Multicluster Global Hub 1.6.6unaffected 1790086176 < *
Red Hat · Multicluster Global Hub 1.6.6unaffected 1790085268 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.11unaffected 1787262214 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.11unaffected 1787263584 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.13unaffected 1787259284 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.13unaffected 1787263693 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.14unaffected 1786976940 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.14unaffected 1787170830 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.15unaffected 1787238598 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.15unaffected 1787240030 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16unaffected 1787242135 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16unaffected 1787242321 < *
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.17unaffected 1787242131 < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD