CVEvulnerability

CVE-2026-17107

8.5 HIGH Published 2026-07-24 Modified 2026-09-29 Official page ↗
Status
Awaiting Analysis
Published
2026-07-24
Last modified
2026-09-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-441

Description

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.

Related

Weakness · CWE (1)

  • CWE-441 Unintended Proxy or Intermediary weakness

References