Intel Cluster Management Toolkit for Kubernetes Privilege Escalation Vulnerability (CVE-2026-20770)

Vulnerability Overview Vulnerability Name: Cluster Management Toolkit for Kubernetes Software Advisory Intel ID: INTEL-SA-01460 Vulnerability Category: Software Impact: Privilege Escalation Severity: Medium Original Publication Date: August 11, 2026 Last Revision Date: November 11, 2026 CVE ID: CVE-2026-20770 CVSS Base Score: 5.4 Medium CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VH:H/VA:H/SC:N/S:N/S:N Description: A protection mechanism failure exists in certain versions of Cluster Management Toolkit for Kubernetes software (versions lower than v0.8.5), which may lead to privilege escalation. A system software attacker combining a privileged user account and a low-complexity attack vector may enable privilege escalation. This result may occur via local access, provided the attack requires exist and does not require special internal knowledge or passive user interaction. The potential vulnerability may impact the system's confidentiality (High), integrity (High), and availability (High), with no subsequent impact on system confidentiality, integrity, or availability. Affected Products Affected Product: All versions of Cluster Management Toolkit for Kubernetes software Remediation Recommendation: Intel has issued an End-of-Life (EOL) notice for Cluster Management Toolkit for Kubernetes software. Effective from the release date of this security advisory, Cluster Management Toolkit for Kubernetes software will no longer receive any additional feature, security, or other updates. Intel recommends that users uninstall or cease using Cluster Management Toolkit for Kubernetes software as soon as possible. Related Link: Cluster Management Toolkit for Kubernetes Software End-of-Life Notice Acknowledgments Intel thanks Lakshmi Vignesh S for reporting this issue. Intel and the broader technology industry follow coordinated disclosure practices, wherein cybersecurity vulnerabilities are publicly disclosed only after mitigation measures are available. Revision History Revision: 1.0 Date: August 11, 2026 Description: Initial Release Legal Disclaimer Intel provides these materials "as is" without any express or implied warranties. All products, dates, and specifications are based on current expectations and are subject to change without notice. Intel product and service descriptions may contain known design flaws or errors, referred to as errata, which may cause products to deviate from published specifications. Errata known at this time are available upon request. Intel products that have reached the end of service updates may no longer receive feature and security updates. For more details regarding support and maintenance, please refer to this help article. The functionality and benefits of Intel technologies depend on system configuration and may require enabled hardware, software, or service activation. Performance varies by system configuration. No product or component can be absolutely secure. Please contact your system manufacturer or retailer, or visit http://intel.com for more information. Certain results have been estimated or simulated using internal Intel analysis, architecture simulation, or modeling and are provided for informational purposes only. Any differences in the hardware, software, or configuration of your system may affect your actual performance. © Intel Corporation. Intel, the Intel logo, and other Intel trademarks are trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others. Report a Vulnerability If you have information regarding a security issue or vulnerability affecting Intel branded products or technologies, please submit your report via the Integrity platform, where you can find eligibility criteria and submission instructions. All vulnerability reports must be submitted through Integrity. For issues unrelated to reporting security vulnerabilities, please contact Intel PSIRT. For issues related to Intel's external presence (intel.com and related subdomains), please contact Intel's External Security Research Team. Need Product Support? If you... Have questions regarding Intel product security features Require technical support Want product updates or patches Please visit Support & Downloads.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Cluster Management Toolkit for Kubernetes Privilege Escalation Vulnerability (CVE-2026-20770)