VDB

CVE-2026-70398

CVE-2026-70398 PUBLISHED CVSS 9.6 CRITICAL

Reported by redhat · Published August 12, 2026

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer tokens from secure locations to a namespace they control. This unauthorized access to tokens can lead to the disclosure of critical information and bypass security policies within ArgoCD AppProjects.

Risk scores

CVSS 3.1
9.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Affected products

VendorProductVersions
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787260689
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787259106
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141787183407
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787238604
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787252179
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787243221
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141787183407
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787252179
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787238604
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787260689
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787243221
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787259106

Timeline

  • Aug 12, 2026 Coalition ESS Score
  • Aug 12, 2026 CVE Published
  • Aug 14, 2026 CVE Updated
  • Aug 24, 2026 EPSS Score (24 in total, the first dated here)
  • Sep 6, 2026 Distribution Patch (6 in total, the first dated here)
  • Sep 6, 2026 Security Advisory (6 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2026-70398
vulnetix vdb fixes CVE-2026-70398

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-70398/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›