CVE-2026-66878

creationtimestamp| type| source ---|---|--- 2026-08-12 12:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msv3fizhx62h...

CVE-2026-66878 Multicloud-operators-subscription: multicloud-operators-subscription: fetchchannelreferences honours channel.spec.secretref.namespace enabling cross-namespace secret exfiltration

A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to cop...