Aller au contenu
en Se connecter
9.9 Critique

CVE-2026-73269 A flaw was found in the cluster-curator-controller component

Description

A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-local access to cluster-wide control. This privilege escalation grants broad permissions, including the ability to access and manipulate secrets, manage cluster actions, and delete hosted clusters or node pools.

Produits et versions touchés

Produit Versions touchées Corrigé en
Multicluster Engine for Kubernetes Versions non publiées
multicluster engine for Kubernetes 2.10 1787201612 premières → < 1787201612 1787201612
multicluster engine for Kubernetes 2.11 1787238383 premières → < 1787238383 1787238383
multicluster engine for Kubernetes 2.17 1786750700 premières → < 1786750700 1786750700
multicluster engine for Kubernetes 2.6 1787264185 premières → < 1787264185 1787264185
multicluster engine for Kubernetes 2.8 1787259011 premières → < 1787259011 1787259011
multicluster engine for Kubernetes 2.9 1787201646 premières → < 1787201646 1787201646
multicluster engine for Kubernetes 2.1 1787201612 premières → < 1787201612 1787201612
multicluster engine for Kubernetes 2.9.0 1787201646 premières → < 1787201646 1787201646

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Multicluster Engine for Kubernetes

Les 79 CVE de Multicluster Engine for Kubernetes →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-114236 storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a… 3.3 Faible CVE-2026-71297 A flaw was found in the maestro gRPC broker 5.4 Moyenne CVE-2026-71299 A flaw was found in Maestro 6.5 Moyenne
Suivre cette CVE