CVE-2026-72508
Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)
CVSS Score
9.9
EPSS Score
0.0%
EPSS Percentile
0th
A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a namespace-admin tenant to perform a confused-deputy attack by creating Subscription Custom Resources (CRs) that leverage a highly privileged ServiceAccount (SA). This enables the tenant to deploy arbitrary cluster-scoped resources, leading to privilege escalation and potential arbitrary code execution across the cluster.
| CWE | CWE-250 |
| Vendor | red hat |
| Product | red hat advanced cluster management for kubernetes 2.11 |
| Published | Aug 12, 2026 |
| Last Updated | Sep 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for red hat red hat advanced cluster management for kubernetes 2.11
Be the first to know when new critical vulnerabilities affecting red hat red hat advanced cluster management for kubernetes 2.11 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.11
All versions affected Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.13
All versions affected Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14
All versions affected Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.15
All versions affected Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16
All versions affected Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60386 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60387 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60388 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60389 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60390 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60391 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-72508 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2514225