EUVD-2026-60362
GHSA-gqg9-92w2-w94m
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Reachable via the Kubernetes API (AV:N) with low complexity, but requires hub-admin/Search CR editor rights (PR:H); injection breaks out of the tenant role into the privileged postgres pod, justifying S:C and full C:H/I:H/A:H.
Primary rating from Vendor (redhat).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, to inject malicious shell commands or SQL statements. This occurs because the WORK_MEM string provided in the Search CR is not properly validated before being used in a bash script and an SQL query. Successful exploitation could lead to arbitrary code execution within the privileged postgres pod, potentially compromising the system.
Articles & Coverage 2
AnalysisAI
Command and SQL injection in Red Hat Advanced Cluster Management for Kubernetes 2 (acm-search-v2-rhel9) lets a privileged tenant escalate to arbitrary code execution inside the cluster's PostgreSQL pod. An authenticated hub administrator or Search Custom Resource editor can supply an unsanitized WORK_MEM value that is passed into both a bash script and an SQL query, breaking out of the intended data plane. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated principal with permission to create or edit the Search Custom Resource - specifically hub-administrator or Search CR editor RBAC rights on the ACM hub - so this is not remotely reachable by an unauthenticated user despite AV:N. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS vector (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, base 9.1) is internally consistent: exploitation is over the Kubernetes API (network), low complexity, no user interaction, and produces a scope change from the tenant's CR-editing role into the privileged database pod. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has obtained a hub-administrator or Search CR editor credential (via phishing, leaked kubeconfig, or an over-privileged service account) edits the Search Custom Resource and sets WORK_MEM to a value embedding shell or SQL payload. When the search indexer applies the CR, the payload is interpolated into the bash script and SQL query and executed inside the privileged PostgreSQL pod, yielding arbitrary code execution. … |
| Remediation | Patch available per vendor advisory: apply the fixed acm-search-v2-rhel9 image published by Red Hat once released, following the errata linked from https://access.redhat.com/security/cve/CVE-2026-71472 (exact fixed version is not stated in the available data, so verify the specific z-stream against the Red Hat errata and Bugzilla 2512151). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all production instances of Red Hat Advanced Cluster Management acm-search-v2-rhel9 across your environment, identify personnel with hub administrator or Search Custom Resource editor roles, and audit the past 30 days of administrative activity logs for WORK_MEM parameter changes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in PostgreSQL
View allPostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() improperl
An issue was discovered in Appsmith before 1.52. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows re
Unauthenticated arbitrary file write in Splunk Enterprise (below 10.2.4 and 10.0.7) and Splunk Cloud Platform (below 10.
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allow
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate t
A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitra
In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve
Unauthenticated SQL injection in Vendure Shop API allows remote attackers to execute arbitrary SQL commands against the
Parse Server is an open source http web server backend. Rated critical severity (CVSS 10.0), this vulnerability is remot
Hard-coded default PostgreSQL credentials shipped in the docker-compose.yaml of langgenius Dify through version 1.5.1 al
A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today