CVE-2026-75924
Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval
- State
- Published
- Severity
- 8.7 High
- Published
- Aug 18, 2026
- Updated
- Aug 18, 2026
- Reserved
- Aug 18, 2026
Description
A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests (CSRs), which could lead to information disclosure and privilege escalation within the cluster.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.7 High | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N | redhat |
Weaknesses
- CWE-269 Improper Privilege Management
Affected Products
| Product | Versions |
|---|---|
Multicluster Engine for KubernetesRed Hat | |
Red Hat Advanced Cluster Management for Kubernetes 2Red Hat | |
Red Hat Advanced Cluster Management for Kubernetes 2Red Hat |
References
- https://access.redhat.com/security/cve/CVE-2026-75924vdb-entry
- RHBZ#2515720issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.