8.2
Élevée
CVE-2026-4740 A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM)
Description
A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege escalation and may allow an attacker to gain control over other managed clusters, including the hub cluster.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Multicluster Engine for Kubernetes | Versions non publiées | |
| multicluster engine for Kubernetes 2.11 1777478390 | premières → < 1777478390 | 1777478390 |
| multicluster engine for Kubernetes 2.6 1775977180 | premières → < 1775977180 | 1775977180 |
| multicluster engine for Kubernetes 2.9 1776445095 | premières → < 1776445095 | 1776445095 |
| multicluster engine for Kubernetes 2.1 1776881164 | premières → < 1776881164 | 1776881164 |
| multicluster engine for Kubernetes 2.8 1775638726 | premières → < 1775638726 | 1775638726 |
| multicluster engine for Kubernetes 2.10 1776881164 | premières → < 1776881164 | 1776881164 |
| multicluster engine for Kubernetes 2.11.0 1777478390 | premières → < 1777478390 | 1777478390 |
| multicluster engine for Kubernetes 2.9.0 1776445095 | premières → < 1776445095 | 1776445095 |
Autres CVE de Multicluster Engine for Kubernetes
Les 79 CVE de Multicluster Engine for Kubernetes →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Moyenne
CVE-2026-114236
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
3.3
Faible
CVE-2026-71297
A flaw was found in the maestro gRPC broker
5.4
Moyenne
CVE-2026-71299
A flaw was found in Maestro
6.5
Moyenne