Riskcovery

CVE-2026-4740

Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation

State
Published
Severity
8.2 High
Published
Apr 7, 2026
Updated
Sep 9, 2026
Reserved
Mar 24, 2026

Read the record on cve.org

Description

A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege escalation and may allow an attacker to gain control over other managed clusters, including the hub cluster.

Scores

CVSSScoreVectorSource
3.18.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hredhat
3.18.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hredhat-SADP

Weaknesses

  • CWE-295 Improper Certificate Validation

Affected Products

ProductVersions
multicluster engine for Kubernetes 2.1Red Hat
  • 1776881164 and laterNot affected
multicluster engine for Kubernetes 2.11Red Hat
  • 1777478390 and laterNot affected
multicluster engine for Kubernetes 2.6Red Hat
  • 1775977180 and laterNot affected
multicluster engine for Kubernetes 2.8Red Hat
  • 1775638726 and laterNot affected
multicluster engine for Kubernetes 2.9Red Hat
  • 1776445095 and laterNot affected
Multicluster Engine for KubernetesRed Hat
    Multicluster Engine for KubernetesRed Hat
      Multicluster Engine for KubernetesRed Hat
        Multicluster Engine for KubernetesRed Hat
          Multicluster Engine for KubernetesRed Hat
            Multicluster Engine for KubernetesRed Hat

              References

              Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.