Lucene search
+L

1 matches found

Cvelist
Cvelist
added yesterday17 views

CVE-2026-71846 Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege

A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...

6.5CVSS
SaveExploits0References2
Rows per page
Query Builder