Red Hat Advanced Cluster Management for Kubernetes 2.13 — Vulnerabilities & Security Advisories 30

All 30 CVE vulnerabilities found in Red Hat Advanced Cluster Management for Kubernetes 2.13, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Red Hat Advanced Cluster Management for Kubernetes, specifically targeting version 2.13 and the Common Weakness Enumeration class. It collects security flaws reported by Red Hat, covering the most recent period of advisory releases. Here you can track the vendor’s security announcements, analyze patterns within a specific weakness category, and review the historical vulnerability record for this particular product release.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-73137	Multicloud-operators-subscription: multicloud-operators-subscription: cross-namespace secret exfiltration via helmrelease.repo.secretref.namespace CWE-200	7.7	High	2026-08-20
CVE-2026-67567	Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction CWE-441	9.9	Critical	2026-08-20
CVE-2026-76827	Search-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering) CWE-693	6.8	Medium	2026-08-19
CVE-2026-76139	Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials CWE-829	8.0	High	2026-08-19
CVE-2026-70496	Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork CWE-250	9.9	Critical	2026-08-19
CVE-2026-18874	Volsync-addon-controller: volsync-addon-controller: annotation values rendered into yaml via text/template without escaping allows yaml injection into subscription CWE-94	6.2	Medium	2026-08-19
CVE-2026-71470	Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa CWE-913	9.1	Critical	2026-08-19
CVE-2026-66780	Submariner-operator: submariner-operator: flat broker trust model grants every spoke full crud on all endpoints, secrets, and endpointslices in broker namespace CWE-284	9.9	Critical	2026-08-18
CVE-2026-66781	Submariner-operator: submariner-operator: ipsec psk stored cleartext in submariner cr spec CWE-312	6.5	Medium	2026-08-18
CVE-2026-75485	Must-gather: must-gather: cluster proxy object dumped raw, bypassing inspect redaction of proxy basic-auth credentials CWE-532	5.5	Medium	2026-08-18
CVE-2026-73834	Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction CWE-312	5.5	Medium	2026-08-18
CVE-2026-66793	Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke CWE-20	8.8	High	2026-08-18
CVE-2026-71472	Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem CWE-78	9.1	Critical	2026-08-17
CVE-2026-70495	Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters CWE-269	8.8	High	2026-08-17
CVE-2026-66792	Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters CWE-863	9.9	Critical	2026-08-17
CVE-2026-71846	Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege CWE-250	6.5	Medium	2026-08-12
CVE-2026-71469	Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dos CWE-770	7.5	High	2026-08-12
CVE-2026-71471	Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image CWE-829	9.0	Critical	2026-08-12
CVE-2026-71473	Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spoke CWE-915	8.5	High	2026-08-12
CVE-2026-72508	Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (//*) CWE-250	9.9	Critical	2026-08-12
CVE-2026-64927	Multicloud-operators-channel: multicloud-operators-channel: cross-namespace secret and configmap mutation via spec.secretref.namespace confused deputy CWE-639	6.4	Medium	2026-08-12
CVE-2026-73122	Multicloud-operators-channel: multicloud-operators-channel: auto-generated role grants every managed-cluster agent secrets:get,list,watch in channel namespaces CWE-269	7.7	High	2026-08-12
CVE-2026-66878	Multicloud-operators-subscription: multicloud-operators-subscription: fetchchannelreferences honours channel.spec.secretref.namespace enabling cross-namespace secret exfiltration CWE-639	7.7	High	2026-08-12
CVE-2026-70398	Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace CWE-441	9.6	Critical	2026-08-12
CVE-2026-72526	Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation CWE-441	9.9	Critical	2026-08-12
CVE-2026-71474	Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response CWE-532	6.3	Medium	2026-08-11
CVE-2026-71468	Acm-search-v2-api-rhel9: search-v2-api: cross-user bearer-token reuse via global federation-config cache CWE-266	5.3	Medium	2026-08-11
CVE-2026-71475	Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url path CWE-22	5.0	Medium	2026-08-11
CVE-2026-71845	Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault() CWE-532	6.3	Medium	2026-08-11
CVE-2026-10090	Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-admin via application subscription CWE-267	9.0	Critical	2026-08-05

All 30 known CVE vulnerabilities affecting Red Hat Advanced Cluster Management for Kubernetes 2.13 with full Chinese analysis, references, and POCs where available.