CVE-2026-71473: Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spoke

Severity: high (CVSS 8.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-12 · updated 2026-10-24
Weakness: CWE-915

Description

A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critical settings, leading to the replacement of container images. This ultimately results in container image injection on the managed cluster, potentially compromising its integrity.

Affected products

Red Hat Advanced Cluster Management for Kubernetes 2.11: all versions — fixed in 1787688827
Red Hat Advanced Cluster Management for Kubernetes 2.13: all versions — fixed in 1787682112
Red Hat Advanced Cluster Management for Kubernetes 2.14: all versions — fixed in 1787682033
Red Hat Advanced Cluster Management for Kubernetes 2.15: all versions — fixed in 1787681674
Red Hat Advanced Cluster Management for Kubernetes 2.16: all versions — fixed in 1787681686
Red Hat Advanced Cluster Management for Kubernetes 2.17: all versions — fixed in 1787681651

How to fix

Upgrade to a fixed version: Red Hat Advanced Cluster Management for Kubernetes 2.11 1787688827; Red Hat Advanced Cluster Management for Kubernetes 2.13 1787682112; Red Hat Advanced Cluster Management for Kubernetes 2.14 1787682033; Red Hat Advanced Cluster Management for Kubernetes 2.15 1787681674; Red Hat Advanced Cluster Management for Kubernetes 2.16 1787681686; Red Hat Advanced Cluster Management for Kubernetes 2.17 1787681651. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-71473 or the next vulnerability affects your stack