Excessive Permissions in search-v2-operator Affects Red Hat Products
CVE-2026-70495
Key Information:
What is CVE-2026-70495?
A significant vulnerability exists in the search-v2-operator component due to excessively permissive roles assigned to the search-serviceaccount. This configuration permits the service account to impersonate any user or group within the entire cluster. Consequently, if an attacker compromises any pod running under this service account, they could leverage these privileges to gain system:masters access, thus enabling full control over the cluster. This flaw underscores the importance of least privilege principles in managing access control in Kubernetes environments.
Affected Version(s)
Red Hat Advanced Cluster Management for Kubernetes 2.11 1787688827
Red Hat Advanced Cluster Management for Kubernetes 2.13 1787682112
Red Hat Advanced Cluster Management for Kubernetes 2.14 1787682033