Aller au contenu
Se connecter
7.1 Élevée

CVE-2026-73266 A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE)

Description

A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exploit this vulnerability by manipulating ClusterClaim labels. This allows the tenant to force a cluster to join a ManagedClusterSet belonging to another tenant. Such unauthorized access could enable the injection of policies and workloads into other tenants' clusters.

Produits et versions touchés

Produit Versions touchées Corrigé en
Multicluster Engine for Kubernetes Versions non publiées
multicluster engine for Kubernetes 2.10 1787196014 premières → < 1787196014 1787196014
multicluster engine for Kubernetes 2.11 1787239442 premières → < 1787239442 1787239442
multicluster engine for Kubernetes 2.17 1786577950 premières → < 1786577950 1786577950
multicluster engine for Kubernetes 2.6 1787259112 premières → < 1787259112 1787259112
multicluster engine for Kubernetes 2.8 1787259059 premières → < 1787259059 1787259059
multicluster engine for Kubernetes 2.9 1787195995 premières → < 1787195995 1787195995
multicluster engine for Kubernetes 2.1 1787196014 premières → < 1787196014 1787196014
multicluster engine for Kubernetes 2.9.0 1787195995 premières → < 1787195995 1787195995
Afficher l’autre branche
Produit Versions touchées Corrigé en
multicluster engine for Kubernetes 2.11.0 1787239442 premières → < 1787239442 1787239442

Autres CVE de Multicluster Engine for Kubernetes

Les 79 CVE de Multicluster Engine for Kubernetes →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-114236 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers 3.3 Faible CVE-2026-71297 A flaw was found in the maestro gRPC broker 5.4 Moyenne CVE-2026-71299 A flaw was found in Maestro 6.5 Moyenne
Suivre cette CVE