by Kastro CVE-2026-66786
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 — Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets
Description · from the CVE record
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node.
Affected
ProductAffectedFixed inSource
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670439CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670231CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670243CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670508CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670233CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670912CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670254CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788023916CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788023940CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788105072CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788043964CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788043961CNA
Scores by source
redhat (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total