VDB

CVE-2026-66792

CVE-2026-66792 PUBLISHED CVSS 9.9 CRITICAL

Reported by redhat · Published August 17, 2026

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.

Risk scores

CVSS 3.1
9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

VendorProductVersions
Red HatMulticluster Global Hub 1.4.91788355439
Red HatMulticluster Global Hub 1.4.91788355599
Red HatMulticluster Global Hub 1.4.91788355417
Red HatMulticluster Global Hub 1.5.81789515408
Red HatMulticluster Global Hub 1.5.81789515288
Red HatMulticluster Global Hub 1.5.81789478830
Red HatMulticluster Global Hub 1.6.61790085494
Red HatMulticluster Global Hub 1.6.61790086176
Red HatMulticluster Global Hub 1.6.61790085268
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787262214
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787263584
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787259284
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787263693
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141786976940
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141787170830
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787238598
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787240030
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787242135
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787242321
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787242131

…and 61 more

Timeline

  • Aug 17, 2026 CVE Published
  • Aug 18, 2026 Coalition ESS Score
  • Aug 20, 2026 CVE Updated
  • Aug 24, 2026 EPSS Score (28 in total, the first dated here)
  • Sep 30, 2026 Distribution Patch (9 in total, the first dated here)
  • Sep 30, 2026 Security Advisory (9 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2026-66792
vulnetix vdb fixes CVE-2026-66792

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-66792/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›