Remote Code Execution Vulnerability in mce-operator-bundle from Red Hat

CVE-2026-75569

What is CVE-2026-75569?

A security flaw exists in the mce-operator-bundle where the build process improperly fetches and executes scripts from a remote repository without conducting necessary integrity checks like commit pinning or signature verification. This vulnerability allows an attacker with write access to the remote repository to execute arbitrary code during the build process, compromising the integrity of the software and potentially leading to the distribution of malicious code.

References