CVE-2026-66780Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity

Description

A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters' endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.

Timeline

Scores

EPSS (exploitation in 30 days)

0.58% · top 52% of all CVEs (15 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Affected products

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.11

  • unaffected 1789135606 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.13

  • unaffected 1789131397 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.14

  • unaffected 1789136328 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.15

  • unaffected 1789136327 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16

  • unaffected 1789136320 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16

  • unaffected 1787854416 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16

  • unaffected 1790670243 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16

  • unaffected 1790670912 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.17

  • unaffected 1788105072 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.17

  • unaffected 1788073481 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.17

  • unaffected 1788572527 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: affected

What to do

Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2026-61078 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2026-66780](https://cveledger.app/badge/CVE-2026-66780.svg)](https://cveledger.app/cve/CVE-2026-66780)

Record last updated 19 Oct 2026, 17:01 UTC.