8.8Hoch
CVE-2026-70495Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters
Beschreibung
A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve `system:masters` access, granting them full control over the cluster.
Schwachstellentyp (CWE):
CWE-269
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| acm | 2.11 | — | |
| acm | 2.13 | — | |
| acm | 2.14 | — | |
| acm | 2.15 | — | |
| acm | 2.16 | — | |
| acm | 2.17 | — | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 | all versions | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | all versions |
Referenzen und Patches
- RHSA-2026:60386 vendor-advisory
- RHSA-2026:60387 vendor-advisory
- RHSA-2026:60388 vendor-advisory
- RHSA-2026:60389 vendor-advisory
- RHSA-2026:60390 vendor-advisory
- RHSA-2026:60391 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-70495 vdb-entry
- RHBZ#2511031 issue-tracking