4 matches found
CVE-2026-71577
A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This allows a compromised managed hub to intercept and collect sensitive bootstrap kubeconfigs, which contain API server token...
6.3CVSS0.00191EPSS
SaveExploits0References2
CVE-2026-71577
CVE-2026-71577 affects multicluster-global-hub. During a ManagedClusterMigration, the system grants all managed hubs read access to a shared communication topic, enabling a compromised hub to intercept bootstrap kubeconfigs containing API server tokens intended for other hubs. These tokens have a...
6.3CVSS5.3AI score0.00191EPSS
SaveExploits0References2
20