Sensitive Data Exposure in Red Hat Advanced Cluster Management for Kubernetes
CVE-2026-75485
5.5MEDIUM
Key Information:
What is CVE-2026-75485?
A vulnerability has been identified in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. This flaw allows the cluster Proxy object to be dumped in its raw form, bypassing the necessary sanitization processes that typically redact sensitive fields. As a result, basic-auth credentials may be exposed within the must-gather archive, posing a risk of sensitive authentication information being accessible to unauthorized individuals with access to the archive.
Affected Version(s)
Red Hat Advanced Cluster Management for Kubernetes 2.11 1787263322
Red Hat Advanced Cluster Management for Kubernetes 2.13 1787260453
Red Hat Advanced Cluster Management for Kubernetes 2.14 1787189811