# Red Hat Advanced Cluster Management for Kubernetes 2.17. Every CVE that names Red Hat Advanced Cluster Management for Kubernetes 2.17 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Stolostron/multicluster-observability-addon: cross-namespace secret disclosure in multicluster-observability-addon via unvalidated configuration references](https://agentprime.io/advisories/CVE-2026-89060.md) `CVE-2026-89060` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 and 4 more · CVSS 7.7 High · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-551 - [Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets](https://agentprime.io/advisories/CVE-2026-66786.md) `CVE-2026-66786` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 and 2 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Code injection - [Multicloud-operators-subscription: multicloud-operators-subscription: cross-namespace secret exfiltration via helmrelease.repo.secretref.namespace](https://agentprime.io/advisories/CVE-2026-73137.md) `CVE-2026-73137` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 7.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: Information disclosure - [Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction](https://agentprime.io/advisories/CVE-2026-67567.md) `CVE-2026-67567` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-441 - [Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label](https://agentprime.io/advisories/CVE-2026-66788.md) `CVE-2026-66788` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-1104 - [Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses](https://agentprime.io/advisories/CVE-2026-66787.md) `CVE-2026-66787` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 and 1 more · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-345 - [Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack](https://agentprime.io/advisories/CVE-2026-66785.md) `CVE-2026-66785` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 and 2 more · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-345 - [Search-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering)](https://agentprime.io/advisories/CVE-2026-76827.md) `CVE-2026-76827` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-693 - [Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials](https://agentprime.io/advisories/CVE-2026-76139.md) `CVE-2026-76139` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 8.0 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-829 - [Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork](https://agentprime.io/advisories/CVE-2026-70496.md) `CVE-2026-70496` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Volsync-addon-controller: volsync-addon-controller: annotation values rendered into yaml via text/template without escaping allows yaml injection into subscription](https://agentprime.io/advisories/CVE-2026-18874.md) `CVE-2026-18874` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Code injection - [Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa](https://agentprime.io/advisories/CVE-2026-71470.md) `CVE-2026-71470` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-913 - [Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity](https://agentprime.io/advisories/CVE-2026-66780.md) `CVE-2026-66780` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Information disclosure - [Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref](https://agentprime.io/advisories/CVE-2026-66783.md) `CVE-2026-66783` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 and 2 more · CVSS 4.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-1357 - [Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps](https://agentprime.io/advisories/CVE-2026-66782.md) `CVE-2026-66782` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 and 2 more · CVSS 5.8 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication](https://agentprime.io/advisories/CVE-2026-66781.md) `CVE-2026-66781` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-749 - [Must-gather: /tmp/kubeconfig retention](https://agentprime.io/advisories/CVE-2026-75485.md) `CVE-2026-75485` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Information disclosure - [Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction](https://agentprime.io/advisories/CVE-2026-73834.md) `CVE-2026-73834` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Information disclosure - [Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke](https://agentprime.io/advisories/CVE-2026-66793.md) `CVE-2026-66793` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-20 - [Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem](https://agentprime.io/advisories/CVE-2026-71472.md) `CVE-2026-71472` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Command injection - [Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters](https://agentprime.io/advisories/CVE-2026-70495.md) `CVE-2026-70495` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 8.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation - [Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters](https://agentprime.io/advisories/CVE-2026-66792.md) `CVE-2026-66792` · CVE record: Red Hat Multicluster Global Hub 1.4.9 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Broken access control - [Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege](https://agentprime.io/advisories/CVE-2026-71846.md) `CVE-2026-71846` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Privilege escalation - [Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dos](https://agentprime.io/advisories/CVE-2026-71469.md) `CVE-2026-71469` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image](https://agentprime.io/advisories/CVE-2026-71471.md) `CVE-2026-71471` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-829 - [Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spoke](https://agentprime.io/advisories/CVE-2026-71473.md) `CVE-2026-71473` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 8.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control - [Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (\*/\*/\*)](https://agentprime.io/advisories/CVE-2026-72508.md) `CVE-2026-72508` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Privilege escalation - [Multicloud-operators-channel: multicloud-operators-channel: cross-namespace secret and configmap mutation via spec.secretref.namespace confused deputy](https://agentprime.io/advisories/CVE-2026-64927.md) `CVE-2026-64927` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control - [Multicloud-operators-channel: multicloud-operators-channel: auto-generated role grants every managed-cluster agent secrets:get,list,watch in channel namespaces](https://agentprime.io/advisories/CVE-2026-73122.md) `CVE-2026-73122` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 Aug 2026 · Tags: Privilege escalation - [Multicloud-operators-subscription: multicloud-operators-subscription: fetchchannelreferences honours channel.spec.secretref.namespace enabling cross-namespace secret exfiltration](https://agentprime.io/advisories/CVE-2026-66878.md) `CVE-2026-66878` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control - [Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace](https://agentprime.io/advisories/CVE-2026-70398.md) `CVE-2026-70398` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-441 - [Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation](https://agentprime.io/advisories/CVE-2026-72526.md) `CVE-2026-72526` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-441 - [Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response](https://agentprime.io/advisories/CVE-2026-71474.md) `CVE-2026-71474` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Information disclosure - [Acm-search-v2-api-rhel9: search-v2-api: cross-user bearer-token reuse via global federation-config cache](https://agentprime.io/advisories/CVE-2026-71468.md) `CVE-2026-71468` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Privilege escalation - [Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url path](https://agentprime.io/advisories/CVE-2026-71475.md) `CVE-2026-71475` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Path traversal - [Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()](https://agentprime.io/advisories/CVE-2026-71845.md) `CVE-2026-71845` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Information disclosure - [Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated via upgrade: websocket header spoofing](https://agentprime.io/advisories/CVE-2026-71467.md) `CVE-2026-71467` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.17 · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Authentication bypass - [Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-admin via application subscription](https://agentprime.io/advisories/CVE-2026-10090.md) `CVE-2026-10090` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Privilege escalation ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .