A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat Subscribe
Acm Subscribe
Multicluster Globalhub Subscribe
Openshift Subscribe
Openshift Data Foundation Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

References
Link Providers
https://access.redhat.com/security/cve/CVE-2026-66792 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2507537 cve-icon cve-icon
History

Mon, 17 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Description A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.
Title Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters
First Time appeared Redhat
Redhat acm
Redhat multicluster Globalhub
Redhat openshift
Redhat openshift Data Foundation
Weaknesses CWE-863
CPEs cpe:/a:redhat:acm:2
cpe:/a:redhat:multicluster_globalhub
cpe:/a:redhat:openshift:4
cpe:/a:redhat:openshift_data_foundation:4
Vendors & Products Redhat
Redhat acm
Redhat multicluster Globalhub
Redhat openshift
Redhat openshift Data Foundation
References
Metrics cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-08-17T18:12:36.136Z

Reserved: 2026-07-27T17:51:24.886Z

Link: CVE-2026-66792

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-17T19:16:34.237

Modified: 2026-08-17T19:16:34.237

Link: CVE-2026-66792

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T19:30:17Z

Weaknesses