CVE-2026-93017

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

PT-2026-108025

Name of the Vulnerable Software and Affected Versions OpenShift 4 affected versions not specified Description The insights-operator-gather ClusterRole grants the operator service account read access to secrets in the core API group without namespace or resourceNames restrictions. This allows the...

CVE-2026-93017: Improper Privilege Management

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...