CVEvulnerability
CVE-2026-64927
6.4 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-08-12
- Last modified
- 2026-10-24
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-639
Description
A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the system handles sensitive information, known as Secrets, across different parts of the system (namespaces). By exploiting this, an attacker can modify these Secrets in unauthorized areas. This could lead to unauthorized access to information or elevated privileges within the system.
Related
Weakness · CWE (1)
- CWE-639 Authorization Bypass Through User-Controlled Key weakness
References
- https://access.redhat.com/errata/RHSA-2026:60386 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60387 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60388 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60389 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60390 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60391 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2026-64927 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2514229 bugzilla.redhat.com