Multicluster Engine CVE-2026-75569

Exploitation requires that the attacker hold write access to the specific remote repository from which the mce-operator-bundle build process fetches scripts - this is the critical prerequisite captured in CVSS PR:H. The build pipeline must actively execute a build cycle that triggers the remote script fetch for the injected payload to run. Exploitation is therefore bounded to: (1) actors with repository write privileges (maintainers, CI service accounts, or entities that have compromised such credentials), and (2) timing coinciding with a build execution. The attack does not require any interaction from end users consuming the operator. Limiting factors include the high privilege bar for repository write access, the requirement for a build trigger event, and the need for the attacker to remain undetected through code review processes if any are in place on the upstream repository.

The CVSS 7.7 score reflects a genuine but access-constrained risk. The vector AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N indicates the attacker must already hold write access to the remote repository (PR:H) - a high privilege requirement that substantially limits the attack surface to insider threats, compromised maintainer accounts, or dependency confusion scenarios. AC:H acknowledges the attacker must be positioned to exploit the specific build-time fetch. Despite these prerequisites, the scope change (S:C) and dual high-severity impacts (C:H, I:H) reflect that a successful attack compromises not just the build environment but all downstream users who consume the resulting operator bundle artifacts. No EPSS score was provided in the input data. KEV status is not listed; this is not confirmed as actively exploited. The threat model maps most closely to a malicious insider or account-takeover scenario targeting build infrastructure - elevated but not opportunistic.

An attacker who has gained write access to the remote repository referenced by the mce-operator-bundle build system - through credential theft, insider access, or a compromised maintainer account - pushes a modified script containing a backdoor payload. The next time the mce-operator-bundle build pipeline executes and fetches the script without integrity verification, the malicious payload runs with build-environment privileges, potentially embedding a trojan into the resulting operator bundle that is then distributed to all downstream Kubernetes clusters deploying the affected operator. No public proof-of-concept code has been identified at time of analysis.