6.5Mittel
CVE-2026-66780Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity
Beschreibung
A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters' endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.
Schwachstellentyp (CWE):
CWE-532
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| acm | 2.11 | — | |
| acm | 2.13 | — | |
| acm | 2.14 | — | |
| acm | 2.15 | — | |
| acm | 2.16 | — | |
| acm | 2.17 | — | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | all versions |
Referenzen und Patches
- RHSA-2026:63016 vendor-advisory
- RHSA-2026:67538 vendor-advisory
- RHSA-2026:67539 vendor-advisory
- RHSA-2026:67540 vendor-advisory
- RHSA-2026:67541 vendor-advisory
- RHSA-2026:67542 vendor-advisory
- RHSA-2026:67543 vendor-advisory
- RHSA-2026:72880 vendor-advisory
- RHSA-2026:85227 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-66780 vdb-entry
- RHBZ#2507524 issue-tracking