CVE-2026-66782: Improper Privilege Management

A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account SA bearer token within the Submariner Custom Resource CR specification. An attacker with access to the cluster's etcd database or through kubectl get commands could obtai...

etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks

...

etcd: Authorization bypasses in multiple APIs

...