CVE-2026-64927 Multicloud-operators-channel: multicloud-operators-channel: cross-namespace secret and configmap mutation via spec.secretref.namespace confused deputy

A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the system handles sensitive information, known as Secrets, across different parts of the system namespaces. By exploiting this, an attacker can modify thes...

CVE-2026-64927

Affects the multicloud-operators-channel component. The vulnerability enables cross-namespace mutation of Secrets (and ConfigMaps) via spec.secretref.namespace, due to a confused deputy flaw, allowing a user with certain permissions to modify Secrets in unauthorized areas and potentially escalate...