VDB

CVE-2026-66795

CVE-2026-66795 PUBLISHED CVSS 9.9 CRITICAL

Reported by redhat · Published August 17, 2026

A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This vulnerability allows a privileged service account on a spoke cluster to submit a malicious CSR. Successful exploitation can lead to privilege escalation, enabling the attacker to obtain administrative credentials on the hub cluster.

Risk scores

CVSS 3.1
9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

VendorProductVersions
Red Hatmulticluster engine for Kubernetes 2.101787078272
Red Hatmulticluster engine for Kubernetes 2.111787078330
Red Hatmulticluster engine for Kubernetes 2.171786577915
Red Hatmulticluster engine for Kubernetes 2.61787260779
Red Hatmulticluster engine for Kubernetes 2.81787259044
Red Hatmulticluster engine for Kubernetes 2.91787078307
Red Hatmulticluster engine for Kubernetes 2.111787078330
Red Hatmulticluster engine for Kubernetes 2.61787260779
Red HatMulticluster Engine for Kubernetes
Red Hatmulticluster engine for Kubernetes 2.171786577915
Red Hatmulticluster engine for Kubernetes 2.9.01787078307
Red Hatmulticluster engine for Kubernetes 2.91787078307
Red Hatmulticluster engine for Kubernetes 2.81787259044
Red Hatmulticluster engine for Kubernetes 2.11787078272
Red Hatmulticluster engine for Kubernetes 2.101787078272

Timeline

  • Aug 17, 2026 CVE Published
  • Aug 18, 2026 EPSS Score (26 in total, the first dated here)
  • Aug 18, 2026 Coalition ESS Score
  • Aug 18, 2026 CVE Updated
  • Sep 30, 2026 Distribution Patch (6 in total, the first dated here)
  • Sep 30, 2026 Security Advisory (6 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2026-66795
vulnetix vdb fixes CVE-2026-66795

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-66795/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›