VDB

RHSA-2026:63016

RHSA-2026:63016 PUBLISHED CVSS 3.700000047683716 LOW

A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Submariner Custom Resource (CR) specification. An attacker with access to the cluster's etcd database or through `kubectl get` commands could obtain this token. The possession of this token grants full control over the mesh network, enabling unauthorized management of network resources such as endpoints and secrets.

Risk Scores

CVSS 3.1
3.700000047683716
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
Red Hatregistry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *
Red Hatregistry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17*, *, *

…and 15 more

Timeline

  • Sep 3, 2026 CVE Published
  • Sep 21, 2026 CVE Updated
  • Sep 21, 2026 Distribution Patch
  • Sep 21, 2026 Distribution Patch
  • Sep 21, 2026 Security Advisory
  • Sep 21, 2026 Security Advisory
  • Sep 21, 2026 Security Advisory
  • Sep 21, 2026 Security Advisory
  • Sep 21, 2026 Security Advisory
  • Sep 21, 2026 Security Advisory
  • Sep 21, 2026 Security Advisory
  • Sep 21, 2026 Security Advisory

References

…and 52 more

Open in Interactive Console →
$ Console Community · 50/day Open console ›