CVE-2026-70496

A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control (RBAC) configurations, approve Certificate Signing Requests (CSRs), and manage ManifestWork. This grants excessive privileges beyond what is necessary for the operator's intended function, potentially leading to privilege escalation within the cluster.

Scoring

Severity

CRITICAL

CVSS base score

9.9

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS probability

0.43%

CWE

CWE-250

Published

2026-08-19

Last modified

2026-09-05

Affected products

• Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13
• Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15
• Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.17
• Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.17
• Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11
• Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14
• Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16

Weakness type

• CWE-250

Related vulnerabilities

• CVE-2026-79942 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
• CVE-2026-87506 — Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who...
• CVE-2026-69464 — Microsoft Office SharePoint Elevation of Privilege Vulnerability
• CVE-2026-69409 — Microsoft Office SharePoint Information Disclosure Vulnerability
• CVE-2026-80238 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
• CVE-2026-83534 — PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()
• CVE-2026-72654 — Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure
• CVE-2026-76018 — Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...

Markdown version · Browse all CVEs