Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110744— Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide

Quick assessment

Affected
Red Hat Multicluster Global Hub
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 中发现了一个漏洞。该 Operator 配置的基于角色的访问控制（RBAC）权限过于宽泛，允许无限制地集群范围内冒充任意用户、用户组和服务账号。攻击者若成功入侵该 Operator 或获取其服务账号凭证，即可利用此漏洞进行权限提升，从而获得对整个集群的完全管理员控制权。

CVSS 7.2 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
Red Hat Multicluster Global Hub any unknown
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-110744

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC) permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator or obtains its service account credentials can exploit this flaw to achieve privilege escalation, gaining full administrative control over the cluster.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Multicluster Global Hub - cpe:/a:redhat:multicluster_globalhub

II. Public POCs for CVE-2026-110744

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110744

请登录查看更多情报信息。

Other References for CVE-2026-110744 (2)

Same Patch Batch · Red Hat · 2026-10-21 · 11 CVEs total

CVE-2026-114406 6.8 MEDIUM Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
CVE-2026-17557 6.5 MEDIUM Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer cred
CVE-2026-92824 6.2 MEDIUM Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts
CVE-2026-92822 6.2 MEDIUM Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml
CVE-2026-92823 6.2 MEDIUM Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml
CVE-2026-85518 6.1 MEDIUM Openscap: openscap: arbitrary file write via path traversal in source datastream decomposi
CVE-2026-114038 5.1 MEDIUM Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed for
CVE-2026-114438 4.2 MEDIUM Keycloak-services: keycloak-services: required otp enrollment bypassed via update user loc
CVE-2026-114370 3.7 LOW Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink t
CVE-2026-114236 3.3 LOW Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompre

IV. Related Vulnerabilities

Same product: Multicluster Global Hub
Same vendor: Red Hat
Same weakness: CWE-269

V. Comments for CVE-2026-110744

No comments yet

Leave a comment