CVE-2026-73267

A flaw was found in the clusterclaims-controller component of multicluster engine MCE. A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the "spec.namespace" field. This allows the tenant to specify and delete any ManagedCluster,...