What’s Vulnerable › Vulnerabilities
CVE-2026-66780: Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-18 · updated 2026-10-19
- Weakness: CWE-532
Description
A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters' endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.
Affected products
- Red Hat Advanced Cluster Management for Kubernetes 2: all versions
- Red Hat Advanced Cluster Management for Kubernetes 2.11: all versions — fixed in 1789135606
- Red Hat Advanced Cluster Management for Kubernetes 2.13: all versions — fixed in 1789131397
- Red Hat Advanced Cluster Management for Kubernetes 2.14: all versions — fixed in 1789136328
- Red Hat Advanced Cluster Management for Kubernetes 2.15: all versions — fixed in 1789136327
- Red Hat Advanced Cluster Management for Kubernetes 2.16: all versions — fixed in 1787854416, 1789136320, 1790670243, 1790670912
- Red Hat Advanced Cluster Management for Kubernetes 2.17: all versions — fixed in 1788073481, 1788105072, 1788572527
How to fix
Upgrade to a fixed version: Red Hat Advanced Cluster Management for Kubernetes 2.11 1789135606; Red Hat Advanced Cluster Management for Kubernetes 2.13 1789131397; Red Hat Advanced Cluster Management for Kubernetes 2.14 1789136328; Red Hat Advanced Cluster Management for Kubernetes 2.15 1789136327; Red Hat Advanced Cluster Management for Kubernetes 2.16 1787854416, 1789136320, 1790670243, 1790670912; Red Hat Advanced Cluster Management for Kubernetes 2.17 1788073481, 1788105072, 1788572527. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2026:63016
- https://access.redhat.com/errata/RHSA-2026:67538
- https://access.redhat.com/errata/RHSA-2026:67539
- https://access.redhat.com/errata/RHSA-2026:67540
- https://access.redhat.com/errata/RHSA-2026:67541
- https://access.redhat.com/errata/RHSA-2026:67542
- https://access.redhat.com/errata/RHSA-2026:67543
- https://access.redhat.com/errata/RHSA-2026:72880
- https://access.redhat.com/errata/RHSA-2026:85227
- https://access.redhat.com/security/cve/CVE-2026-66780
- https://bugzilla.redhat.com/show_bug.cgi?id=2507524
Get alerted when CVE-2026-66780 or the next vulnerability affects your stack