EUVD-2026-53294
GHSA-g9vp-wj77-5767
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
Reachable via the Kubernetes API (AV:N) with low complexity; requires only namespace 'edit' rights per the description so PR:L not PR:H; escalation beyond the namespace to cluster-admin gives S:C and full C/I/A:H.
Primary rating from Vendor (redhat).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
Lifecycle Timeline
7DescriptionNVD
A flaw was found in the Application Subscription controller (multicluster-operators-subscription) of Red Hat Advanced Cluster Management for Kubernetes (ACM). A user with namespace-scoped "edit" privileges in an ACM hub namespace can create a Channel resource pointing to a Helm repository they control and a Subscription resource referencing it. The app-subscription controller fetches and applies the Helm chart contents with its own elevated authority, without verifying whether the subscription creator holds the "open-cluster-management:subscription-admin" role and without restricting applied resources to the subscription namespace. This allows the attacker to include cluster-scoped resources in the Helm chart, such as a ClusterRoleBinding granting the attacker's ServiceAccount the "cluster-admin" ClusterRole. Successful exploitation results in full cluster-admin privilege escalation. This contradicts the ACM documentation which states that non-subscription-admin users should have resources deployed into the subscription namespace only.
Articles & Coverage 1
AnalysisAI
Privilege escalation to cluster-admin in Red Hat Advanced Cluster Management for Kubernetes (ACM) lets a user holding only namespace-scoped 'edit' rights on an ACM hub namespace take over the entire cluster. By creating a Channel pointing to an attacker-controlled Helm repository and a Subscription referencing it, the app-subscription controller (multicluster-operators-subscription) applies the chart with its own elevated authority and without enforcing the subscription-admin role or namespace confinement, letting the chart install cluster-scoped objects such as a ClusterRoleBinding to cluster-admin. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must already be authenticated to the ACM hub and hold namespace-scoped 'edit' RBAC rights in an ACM hub namespace, sufficient to create Channel and Subscription custom resources, and must control (or be able to reference) a Helm repository reachable by the app-subscription controller that serves a chart containing cluster-scoped resources such as a ClusterRoleBinding. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely serious authenticated privilege-escalation issue rather than a high-CVSS-but-low-real-risk finding, because the technical impact is total cluster compromise (SSVC Technical Impact: total; CVSS scope-changed with C:H/I:H) and the barrier - namespace-scoped 'edit' rights on an ACM hub namespace - is a privilege that is routinely delegated to application and platform teams. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A developer or CI service account that has been granted namespace-scoped 'edit' on an ACM hub namespace stands up a Helm repository containing a chart with a ClusterRoleBinding that binds their own ServiceAccount to cluster-admin, then creates a Channel pointing at that repo and a Subscription referencing it. The app-subscription controller fetches and applies the chart with its elevated authority, installing the ClusterRoleBinding, after which the attacker's ServiceAccount holds cluster-admin over the whole hub. … |
| Remediation | Apply the Red Hat ACM erratum for CVE-2026-10090 once available; the input data does not contain an exact fixed version, so the specific patched release must be confirmed from the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-10090 and Bugzilla 2483292 (https://bugzilla.redhat.com/show_bug.cgi?id=2483292) rather than assumed here. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit and immediately restrict who holds namespace-scoped 'edit' rights in ACM hub namespaces, enable detailed audit logging for Channel and Subscription object creation and application. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Kubernetes
View allA critical vulnerability in Kubernetes ingress-nginx controller allows unauthenticated attackers with pod network access
Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
Kubernetes ingress-nginx contains a configuration injection vulnerability via the mirror-target and mirror-host Ingress
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingres
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-c
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Rated critical severity (CVSS 9.9), this vulne
Unauthenticated remote attackers can trigger complete database overwrites, server-side file reads, and SSRF attacks agai
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4
Fluentd configuration injection in the kube-logging Logging operator before 6.6.0 allows a namespace-scoped user who can
Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass
Same weakness CWE-267 – Privilege Defined With Unsafe Actions
View allSame technique Privilege Escalation
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today