by Kastro CVE-2026-71471
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 — Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image
Description · from the CVE record
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exploit a vulnerability in the `Collector.ImageOverride` field. This allows the attacker to deploy an arbitrary container image across all managed clusters. The consequence is remote code execution (RCE), enabling the attacker to execute commands and potentially access sensitive information across the entire fleet of managed clusters.
Affected
ProductAffectedFixed inSource
Red Hat Advanced Cluster Management for Kubernetes 2.11see advisory1787688827CNA
Red Hat Advanced Cluster Management for Kubernetes 2.13see advisory1787682112CNA
Red Hat Advanced Cluster Management for Kubernetes 2.14see advisory1787682033CNA
Red Hat Advanced Cluster Management for Kubernetes 2.15see advisory1787681674CNA
Red Hat Advanced Cluster Management for Kubernetes 2.16see advisory1787681686CNA
Red Hat Advanced Cluster Management for Kubernetes 2.17see advisory1787681651CNA
Scores by source
redhat (CNA)9.0CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial