CVE-2026-66800

A flaw was found in cluster-backup-operator. A namespace administrator with privileges in the open-cluster-management-backup namespace can exploit a feature in the Restore Custom Resource CR. By setting the cleanupBeforeRestore field to CleanupAll, an attacker can trigger an unguarded, cluster-wi...

CVE-2026-66797

A flaw was found in the cluster-backup-operator. An attacker with write access to the backup storage location or the ability to create a Velero Backup object can inject malicious Role-Based Access Control RBAC resources into a backup. When this tampered backup is restored, the operator processes...

CVE-2026-66799

A flaw was found in the cluster-backup-operator. A privileged user with administrative access to a specific namespace could exploit a vulnerability in the backup restoration process. This flaw allows them to redirect sensitive information, such as cloud provider credentials and access tokens, fro...

CVE-2026-66798

A flaw was found in cluster-backup-operator. A namespace administrator in open-cluster-management-backup can create a Restore Custom Resource CR with malicious hooks. These hooks allow the execution of arbitrary commands within any matching restored pod, leading to the exfiltration of...