Log in Start free

Vulnerability · Published Aug 19, 2026 · Assigned by redhat

CVE-2026-71470Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa

Critical 9.1

In plain English

A critical-severity security flaw in Red Hat Advanced Cluster Management for Kubernetes 2.11 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.7%top 46.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Custom Resource (CR) editor, to manipulate Search CR fields such as imageOverride, arguments, and environment variables without proper validation. By exploiting this, an attacker can mount arbitrary secrets into a search container's environment or replace the container image with an attacker-controlled one. This leads to privilege escalation and can result in a full cluster compromise due to the ServiceAccount's extensive impersonation permissions.

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 see references
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 see references
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 see references
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 see references
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 see references
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.17 see references

Weakness: CWE-913 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References