CVE-2026-70398

creationtimestamp| type| source ---|---|--- 2026-08-12 02:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msu3iq2wjt2d 2026-08-12 03:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117080301494306509 2026-08-12 03:00:26+00:00| seen|...

CVE-2026-70398 Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...