Description
A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Multicluster Global Hub 1.4.9 | — | — |
| Red Hat | Multicluster Global Hub 1.5.8 | — | — |
| Red Hat | Multicluster Global Hub 1.6.6 | — | — |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | — | — |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | — | — |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | — |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 | — | — |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 | — | — |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | — | — |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat Openshift Data Foundation 4 | — | — |
References
- RHSA-2026:60386 vendor-advisory
- RHSA-2026:60387 vendor-advisory
- RHSA-2026:60388 vendor-advisory
- RHSA-2026:60389 vendor-advisory
- RHSA-2026:60390 vendor-advisory
- RHSA-2026:60391 vendor-advisory
- RHSA-2026:67516 vendor-advisory
- RHSA-2026:71597 vendor-advisory
- RHSA-2026:73419 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-66792 vdb-entry
- RHBZ#2507537 issue-tracking