What’s Vulnerable › Vulnerabilities
CVE-2026-71472: Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-17 · updated 2026-08-27
- Weakness: CWE-78
Description
A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, to inject malicious shell commands or SQL statements. This occurs because the WORK_MEM string provided in the Search CR is not properly validated before being used in a bash script and an SQL query. Successful exploitation could lead to arbitrary code execution within the privileged postgres pod, potentially compromising the system.
Affected products
- Red Hat Advanced Cluster Management for Kubernetes 2.11: all versions — fixed in 1787688827
- Red Hat Advanced Cluster Management for Kubernetes 2.13: all versions — fixed in 1787682112
- Red Hat Advanced Cluster Management for Kubernetes 2.14: all versions — fixed in 1787682033
- Red Hat Advanced Cluster Management for Kubernetes 2.15: all versions — fixed in 1787681674
- Red Hat Advanced Cluster Management for Kubernetes 2.16: all versions — fixed in 1787681686
- Red Hat Advanced Cluster Management for Kubernetes 2.17: all versions — fixed in 1787681651
How to fix
Upgrade to a fixed version: Red Hat Advanced Cluster Management for Kubernetes 2.11 1787688827; Red Hat Advanced Cluster Management for Kubernetes 2.13 1787682112; Red Hat Advanced Cluster Management for Kubernetes 2.14 1787682033; Red Hat Advanced Cluster Management for Kubernetes 2.15 1787681674; Red Hat Advanced Cluster Management for Kubernetes 2.16 1787681686; Red Hat Advanced Cluster Management for Kubernetes 2.17 1787681651. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2026:60386
- https://access.redhat.com/errata/RHSA-2026:60387
- https://access.redhat.com/errata/RHSA-2026:60388
- https://access.redhat.com/errata/RHSA-2026:60389
- https://access.redhat.com/errata/RHSA-2026:60390
- https://access.redhat.com/errata/RHSA-2026:60391
- https://access.redhat.com/security/cve/CVE-2026-71472
- https://bugzilla.redhat.com/show_bug.cgi?id=2512151
Get alerted when CVE-2026-71472 or the next vulnerability affects your stack