Lucene search
+L

94 matches found

Cvelist
Cvelist
added 2026/08/12 9:46 p.m.34 views

CVE-2026-71846 Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege

A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...

6.5CVSS0.00121EPSS
SaveExploits0References8
Rows per page
Query Builder