Kubernetes Tenant Vulnerability in StreamsHub Console by Red Hat

CVE-2026-105311

What is CVE-2026-105311?

The StreamsHub Console operator exhibits a serious flaw where a Kubernetes tenant with the capability to create Console custom resources can manipulate the 'spec.kafkaClusters[].credentials.kafkaUser.namespace' field. This misconfiguration permits the tenant to target any namespace, leading to unauthorized access of sensitive KafkaUser secrets stored in the victim-namespace. As the operator operates with cluster-wide Secrets RBAC, it reads critical secrets such as SASL credentials or TLS private keys and exposes them by inadvertently writing the plaintext data into a Secret in the attacker's selected namespace. This vulnerability arises from a lack of same-namespace validation or an allowlist, allowing for potential information leakage across namespaces.

References