CVE-2026-75569: fallo de gravedad alta en Red Hat multicluster engine for Kubernetes 2.10
Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.7epss 0.6%
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute arbitrary code during the build. The consequence is a compromised build process, potentially leading to the distribution of malicious software.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Productos afectados
Red Hat · multicluster engine for Kubernetes 2.10Red Hat · multicluster engine for Kubernetes 2.11Red Hat · multicluster engine for Kubernetes 2.17Red Hat · multicluster engine for Kubernetes 2.6Red Hat · multicluster engine for Kubernetes 2.8Red Hat · multicluster engine for Kubernetes 2.9CVEs relacionadas — Red Hat multicluster engine for Kubernetes 2.10
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-16242CRITICALHypershift: konnectivity proxy-server accepts agent connections without validating client certificatesEPSS 0.9%CVE-2026-73268CRITICALCluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injectionEPSS 0.9%CVE-2026-10059CRITICALCluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount tokenEPSS 0.6%CVE-2026-73267HIGHClusterclaims-controller: managedcluster deletion keyed solely on clusterclaim.spec.namespace with no local ownership checkEPSS 0.6%CVE-2026-66794CRITICALCluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public routeEPSS 0.6%CVE-2026-17107HIGHCluster-proxy: impersonation-header injection grants cluster-admin on every managed clusterEPSS 0.6%
Referencias
https://access.redhat.com/errata/RHSA-2026:59634https://access.redhat.com/errata/RHSA-2026:59636https://access.redhat.com/errata/RHSA-2026:59637https://access.redhat.com/errata/RHSA-2026:59638https://access.redhat.com/errata/RHSA-2026:59642https://access.redhat.com/errata/RHSA-2026:59643https://access.redhat.com/security/cve/CVE-2026-75569https://bugzilla.redhat.com/show_bug.cgi?id=2519849