VDB

CVE-2026-66780

CVE-2026-66780 PUBLISHED CVSS 6.5 MEDIUM

Reported by redhat · Published August 18, 2026

A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters' endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111789135606
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131789131397
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141789136328
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151789136327
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161789136320
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788105072
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788073481
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788572527
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787689013, 1789135606
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787365971, 1787365971, 1789131397
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161789136320, 1787362694
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787362658, 1787362658, 1788572527
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788073481, 1788073481
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787362733, 1789136327, 1787362733
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788105072, 1788105072

…and 1 more

Timeline

  • Aug 18, 2026 CVE Published
  • Aug 20, 2026 Coalition ESS Score
  • Aug 24, 2026 EPSS Score
  • Aug 27, 2026 EPSS Score
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Security Advisory
  • Aug 28, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›