CVE-2026-66795

A flaw was found in the managedcluster-import-controller. The Certificate Signing Request CSR auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This vulnerability allows a privileged service account on a...

PT-2026-76789

Name of the Vulnerable Software and Affected Versions managedcluster-import-controller affected versions not specified Description The managedcluster-import-controller contains a flaw in its Certificate Signing Request CSR auto-approval logic. The system fails to properly validate incoming CSRs...