Multicluster Global Hub 1.4.9 — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Multicluster Global Hub 1.4.9, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-66792	Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters CWE-863	9.9	Critical	2026-08-17
CVE-2026-71577	Multicluster-global-hub: multicluster-global-hub: spec-topic read acl leaks bootstrap kubeconfigs to all managed hubs during migration CWE-522	6.3	Medium	2026-08-10
CVE-2026-71576	Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source() for leaf-hub identity in all status handlers CWE-345	8.5	High	2026-08-10

All 3 known CVE vulnerabilities affecting Multicluster Global Hub 1.4.9 with full Chinese analysis, references, and POCs where available.