Vulnerability · Published Aug 18, 2026 · Assigned by redhat
CVE-2026-75924Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval
High 8.7
In plain English
A high-severity privilege mismanagement in Multicluster Engine for Kubernetes from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Severity (CVSS 3.1)8.7High
Exploit odds (30 days)0.3%top 81.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests (CSRs), which could lead to information disclosure and privilege escalation within the cluster.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Multicluster Engine for Kubernetes | see references |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | see references |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | see references |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
References
- https://access.redhat.com/security/cve/CVE-2026-75924 vdb-entry, x_refsource_REDHAT
- RHBZ#2515720 issue-tracking, x_refsource_REDHAT