CVE-2026-66792

creationtimestamp| type| source ---|---|--- 2026-08-17 18:48:59+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117112342968785881 2026-08-17 20:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcilkbuts2r 2026-08-17 20:07:49+00:00| seen|...

CVE-2026-66792 Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into a...