CVE-2026-73137

creationtimestamp| type| source ---|---|--- 2026-08-20 22:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkant5wg626...

CVE-2026-73137

A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management RHACM. A tenant with HelmRelease create permissions can exploit this vulnerability by manipulating the secretRef.Namespace field. This allows the GetSecret function in the HelmRelease...