Arbitrary Configuration Injection Vulnerability in Red Hat Managed Clusters
CVE-2026-71473
8.5HIGH
Key Information:
What is CVE-2026-71473?
A flaw in the 'search-v2-operator' component allows a user with specific administrative permissions on a managed cluster to execute an arbitrary configuration data injection. This vulnerability can lead to the manipulation of critical settings, enabling the replacement of container images within the managed cluster. Such actions may compromise the integrity and security of the entire cluster, highlighting the importance of implementing robust security measures and stringent access controls.
Affected Version(s)
Red Hat Advanced Cluster Management for Kubernetes 2.11 1787688827
Red Hat Advanced Cluster Management for Kubernetes 2.13 1787682112
Red Hat Advanced Cluster Management for Kubernetes 2.14 1787682033