Skip to content
fr Sign in
7.7 High

CVE-2026-73122 A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM)

Description

A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a compromised agent from a managed cluster to gain unauthorized access to sensitive information. Specifically, the agent can read all Secrets and ConfigMaps within any Channel namespace on the hub, potentially exposing credentials for other tenants' Git and Helm repositories. This could lead to significant information disclosure.

Affected products and versions

Product Affected versions Fixed in
Red Hat Advanced Cluster Management for Kubernetes 2 Versions not published
Red Hat Advanced Cluster Management for Kubernetes 2.11 1787260663 earliest → < 1787260663 1787260663
Red Hat Advanced Cluster Management for Kubernetes 2.13 1787259310 earliest → < 1787259310 1787259310
Red Hat Advanced Cluster Management for Kubernetes 2.14 1787172840 earliest → < 1787172840 1787172840
Red Hat Advanced Cluster Management for Kubernetes 2.15 1787238600 earliest → < 1787238600 1787238600
Red Hat Advanced Cluster Management for Kubernetes 2.16 1787242105 earliest → < 1787242105 1787242105
Red Hat Advanced Cluster Management for Kubernetes 2.17 1787242099 earliest → < 1787242099 1787242099

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Advanced Cluster Management for Kubernetes 2

The 121 CVEs of Red Hat Advanced Cluster Management for Kubernetes 2 →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Medium CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 High CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 High CVE-2026-93685 A flaw was found in the multicluster-observability-addon 5.4 Medium
Track this CVE