CVE-2026-66795 Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)

A flaw was found in the managedcluster-import-controller. The Certificate Signing Request CSR auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This vulnerability allows a privileged service account on a...

CVE-2026-70495

A flaw was found in search-v2-operator. This component's search-serviceaccount has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve...

CVE-2026-70495 Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters

A flaw was found in search-v2-operator. This component's search-serviceaccount has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve...

CVE-2026-70495 Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters

A flaw was found in search-v2-operator. This component's search-serviceaccount has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve...

CVE-2026-70495

CVE-2026-70495 is a privilege escalation flaw in the search-v2-operator component of OpenShift. The search-serviceaccount is shared across 4 pods and carries overly broad permissions that allow cluster-wide impersonation of users and groups. An attacker who gains access to any pod running under t...

CVE-2026-71567 User-controlled variables inserted unescaped into shell scripts and Kubernetes manifests

In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials which are not verified by FakeFish...

CVE-2026-71567

CVE-2026-71567 affects openshift-metal3/fakefish , a tool used for provisioning bare-metal infrastructure. The vulnerability is a shell injection caused by unquoted shell variables being inserted into command lines and Kubernetes manifests. The primary attack vectors are the Image URL and BMC cre...

CVE-2026-71567 User-controlled variables inserted unescaped into shell scripts and Kubernetes manifests

In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials which are not verified by FakeFish...

PT-2026-76762

Name of the Vulnerable Software and Affected Versions search-v2-operator affected versions not specified Description A flaw exists in the search-v2-operator where the search-serviceaccount is assigned overly broad permissions. This allows for the impersonation of users and groups across the entir...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, openbao, kgateway, openbao-fips, kuberay-operator-fips, container-object-storage-interface, porch, cyberark-secrets-provider-for-k8s, postgres-operator, kyverno-notation-aws, langfuse-fips, crossplane-provider-azure-kusto,...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, temporal-server, openbao, kgateway, openbao-fips, kyverno-notation-aws, langfuse-fips, crossplane-provider-azure-kusto, crossplane-provider-aws-apigateway, kserve-modelmesh-serving, apko-fips, crossplane-provider-aws-emrserverless-fips,...

GHSA-7QCH-W8M5-G3H3 vulnerabilities

Vulnerabilities for packages: rekor, skopeo, aws-flb-firehose, docker-machine-driver-harvester, grafana-rollout-operator, smokescreen, certificate-transparency, kubernetes-dashboard-api, addon-resizer, crane, kubernetes-ingress-defaultbackend, prometheus, tekton-pipelines, rancher-telemetry,...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: loki, redis-operator, crossplane-provider-aws-route53, k8s-device-plugin, knative-eventing, skopeo, prometheus-alertmanager, crossplane, mattermost, kubernetes-csi-external-health-monitor, seaweedfs, buildah, docker-machine-driver-harvester, cloudnative-pg,...

GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: loki, redis-operator, crossplane-provider-aws-route53, k8s-device-plugin, pgpool2exporter, cluster-proportional-autoscaler, knative-eventing, rancher-webhook, skopeo, stakater-reloader, kubernetes-csi-external-health-monitor, aws-eks-pod-identity-agent, seaweedfs,...

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-56853 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, openbao, kgateway, openbao-fips, kuberay-operator-fips, cyberark-secrets-provider-for-k8s, postgres-operator, kyverno-notation-aws, langfuse-fips, crossplane-provider-azure-kusto, crossplane-provider-aws-apigateway, kserve-modelmesh-serving,...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, openbao, kgateway, openbao-fips, kuberay-operator-fips, cyberark-secrets-provider-for-k8s, postgres-operator, kyverno-notation-aws, langfuse-fips, crossplane-provider-azure-kusto, crossplane-provider-aws-apigateway, kserve-modelmesh-serving,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: kuberay-operator-fips, cyberark-secrets-provider-for-k8s, kubescape-http-request-fips, apko-fips, cosign-fips, terraform-provider-tls-fips, yace-fips, kubescape-operator-fips, crossplane-provider-sql-fips, crossplane-provider-aws-lambda-fips, commercial-spilo, sbomqs...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, openbao, kgateway, openbao-fips, kuberay-operator-fips, container-object-storage-interface, porch, cyberark-secrets-provider-for-k8s, postgres-operator, kyverno-notation-aws, langfuse-fips, crossplane-provider-azure-kusto,...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: kuberay-operator-fips, cyberark-secrets-provider-for-k8s, kubescape-http-request-fips, apko-fips, cosign-fips, terraform-provider-tls-fips, yace-fips, kubescape-operator-fips, crossplane-provider-sql-fips, crossplane-provider-aws-lambda-fips, commercial-spilo, sbomqs...