CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management, allowing a namespace-admin tenant to exploit a confused-deputy attack. This flaw enables the creation of Subscription Custom Resources that leverage a highly privileged ServiceAccount, facilitating privilege escalation and potential arbitrary code execution across the cluster. Organizations using RHACM should prioritize remediation to mitigate the risk of unauthorized access and control over their clusters.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a namespace-admin tenant to perform a confused-deputy attack by creating Subscription Custom Resources (CRs) that leverage a highly privileged ServiceAccount (SA). This enables the tenant to deploy arbitrary cluster-scoped resources, leading to privilege escalation and potential arbitrary code execution across the cluster.