What’s Vulnerable › Vulnerabilities
CVE-2026-70496: Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork
- Severity: critical (CVSS 9.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-19 · updated 2026-10-26
- Weakness: CWE-250
Description
A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control (RBAC) configurations, approve Certificate Signing Requests (CSRs), and manage ManifestWork. This grants excessive privileges beyond what is necessary for the operator's intended function, potentially leading to privilege escalation within the cluster.
Affected products
- Red Hat Advanced Cluster Management for Kubernetes 2.11: all versions — fixed in 1787688827
- Red Hat Advanced Cluster Management for Kubernetes 2.13: all versions — fixed in 1787682112
- Red Hat Advanced Cluster Management for Kubernetes 2.14: all versions — fixed in 1787682033
- Red Hat Advanced Cluster Management for Kubernetes 2.15: all versions — fixed in 1787681674
- Red Hat Advanced Cluster Management for Kubernetes 2.16: all versions — fixed in 1787681686
- Red Hat Advanced Cluster Management for Kubernetes 2.17: all versions — fixed in 1787229539, 1787681651
How to fix
Upgrade to a fixed version: Red Hat Advanced Cluster Management for Kubernetes 2.11 1787688827; Red Hat Advanced Cluster Management for Kubernetes 2.13 1787682112; Red Hat Advanced Cluster Management for Kubernetes 2.14 1787682033; Red Hat Advanced Cluster Management for Kubernetes 2.15 1787681674; Red Hat Advanced Cluster Management for Kubernetes 2.16 1787681686; Red Hat Advanced Cluster Management for Kubernetes 2.17 1787229539, 1787681651. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2026:60386
- https://access.redhat.com/errata/RHSA-2026:60387
- https://access.redhat.com/errata/RHSA-2026:60388
- https://access.redhat.com/errata/RHSA-2026:60389
- https://access.redhat.com/errata/RHSA-2026:60390
- https://access.redhat.com/errata/RHSA-2026:60391
- https://access.redhat.com/security/cve/CVE-2026-70496
- https://bugzilla.redhat.com/show_bug.cgi?id=2511032
Get alerted when CVE-2026-70496 or the next vulnerability affects your stack