VDB
CVE-2026-66786
CVE-2026-66786
PUBLISHED
CVSS 9.1 CRITICAL
Reported by redhat · Published September 2, 2026
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node.
Risk Scores
CVSS 3.1
9.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788023916 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788023940 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788105072 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043964 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043961 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788073481 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043970 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043970, 1788043970 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788023940, 1788023940 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788105072, 1788105072 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043964, 1788043964 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788023916, 1788023916 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788073481, 1788073481 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
…and 5 more
Timeline
- Sep 2, 2026 Coalition ESS Score
- Sep 2, 2026 CVE Published
- Sep 3, 2026 EPSS Score
- Sep 5, 2026 EPSS Score
- Sep 5, 2026 CVE Updated
- Sep 6, 2026 EPSS Score
- Sep 6, 2026 Distribution Patch
- Sep 6, 2026 Security Advisory
- Sep 9, 2026 EPSS Score
- Sep 12, 2026 EPSS Score
- Sep 15, 2026 EPSS Score
- Sep 16, 2026 EPSS Score
References
- RHSA-2026:63016 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2507531 issue-trackingx_refsource_REDHAT