CVE-2026-110744

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

CVE-2026-110744 Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

CVE-2026-110744

A vulnerability exists in multicluster-global-hub-operator-bundle due to overly broad role-based access control (RBAC) permissions. This flaw allows for unrestricted, cluster-wide impersonation of arbitrary users, groups, and service accounts. An attacker who successfully compromises the operator...

EUVD-2026-107418

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

CVE-2026-110744

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...