by Kastro CVE-2026-66788
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 — Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label
Description · from the CVE record
A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized EndpointSlices and ServiceImports into any namespace on peer clusters, including critical system namespaces like kube-system and openshift-*. This could lead to privilege escalation or other forms of system compromise within the cluster.
Affected
ProductAffectedFixed inSource
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670439CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670231CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670243CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1790670912CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788023916CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788023940CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788105072CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1788073481CNA
Scores by source
redhat (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total