CVE-2024-9779highCWE-266

CVE-2024-9779: high-severity vulnerability in open-cluster-management-io

Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens

Published · Updated

Follow this CVE+ Monitor Red Hat Advanced Cluster Management for Kubernetes+ Monitor open-cluster-management-io

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.4%
A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named "cluster-manager", which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager's token and steal any service account token by creating and mounting the target service account to control the whole cluster.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Affected products
open-cluster-management-ioRed Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Related CVEs — open-cluster-management-io

In the same product, most dangerous first.

CVE-2026-66786CRITICALSubmariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnetsEPSS 1.4%CVE-2024-3727HIGHContainers/image: digest type does not guarantee valid typeEPSS 1.3%CVE-2024-11831MEDIUMNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptEPSS 1.1%CVE-2026-16242CRITICALHypershift: konnectivity proxy-server accepts agent connections without validating client certificatesEPSS 0.9%CVE-2024-1139HIGHCluster-monitoring-operator: credentials leakEPSS 0.9%CVE-2024-0874MEDIUMCoredns: cd bit response is cached and served laterEPSS 0.8%