CVE-2026-66788

A vulnerability in Lighthouse allows a remote attacker who has compromised a spoke cluster to inject unauthorized EndpointSlices and ServiceImports into any namespace on peer clusters. The root cause is that the destination namespace for resource injection is derived from an attacker-controlled l...