Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-73267— Clusterclaims-controller: clusterclaims-controller: managedcluster deletion keyed solely on clusterclaim.spec.namespace with no ownership check

Quick assessment

Affected
Red Hat Multicluster Engine for Kubernetes
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在多云集群引擎（Multicluster Engine, MCE）的 clusterclaims-controller 组件中发现了一个安全漏洞。拥有标准权限以创建和删除 ClusterClaim 资源的租户可通过操纵 字段利用此漏洞。由于缺乏所有权检查机制，该租户能够指定并删除任意 ManagedCluster，包括集群管理端（hub）的 local-cluster 以及其他租户的集群。此漏洞可导致拒绝服务（DoS）攻击，因为它允许未经授权的 ManagedCluster 删除操作。

CVSS 7.7 · High EPSS 0.33% · P26

Affected Version Matrix 1

VendorProduct Version RangeStatus
Red Hat Multicluster Engine for Kubernetes any affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-73267

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Clusterclaims-controller: clusterclaims-controller: managedcluster deletion keyed solely on clusterclaim.spec.namespace with no ownership check
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the `spec.namespace` field. This allows the tenant to specify and delete any ManagedCluster, including the hub's local-cluster or other tenants' clusters, due to a missing ownership check. This vulnerability can lead to a denial of service by enabling unauthorized deletion of ManagedClusters.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
服务端安全的客户端实施
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Multicluster Engine for Kubernetes - cpe:/a:redhat:multicluster_engine

II. Public POCs for CVE-2026-73267

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-73267

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-73267 (1)

Other References for CVE-2026-73267 (1)

IV. Related Vulnerabilities

Same product: Multicluster Engine for Kubernetes
Same vendor: Red Hat
Same weakness: CWE-602

V. Comments for CVE-2026-73267

No comments yet

Leave a comment