VDB

CVE-2026-73834

CVE-2026-73834 PUBLISHED CVSS 5.5 MEDIUM

Reported by redhat · Published August 18, 2026

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulting archive, potentially exposing sensitive information to anyone with access to the archive.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787263322
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787260453
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141787189811
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787238730
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787234748
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787228698
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787260453
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787238730
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787263322
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787228698
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787234748
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141787189811

Timeline

  • Aug 18, 2026 CVE Published
  • Aug 19, 2026 Coalition ESS Score
  • Aug 24, 2026 EPSS Score
  • Aug 27, 2026 EPSS Score
  • Sep 5, 2026 CVE Updated
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›