Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-10059

Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount token

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a token for a ServiceAccount with cluster-wide administrative authority. This leads to a privilege escalation, allowing the tenant administrator to gain full control over the cluster.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat multicluster engine for Kubernetes 2.1

Default version status: affected

  • 1787201612 to < *unaffected

Red Hat multicluster engine for Kubernetes 2.11

Default version status: affected

  • 1787238383 to < *unaffected

Red Hat multicluster engine for Kubernetes 2.6

Default version status: affected

  • 1787264185 to < *unaffected

Red Hat multicluster engine for Kubernetes 2.8

Default version status: affected

  • 1787259011 to < *unaffected

Red Hat multicluster engine for Kubernetes 2.9

Default version status: affected

  • 1787201646 to < *unaffected

References