CVE-2026-66792Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

Description

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.

Timeline

Scores

EPSS (exploitation in 30 days)

0.69% · top 47% of all CVEs (14 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.9.

Affected products

• Red Hat · Multicluster Global Hub 1.4.9

  • unaffected 1788355439 – < *

• Red Hat · Multicluster Global Hub 1.4.9

  • unaffected 1788355599 – < *

• Red Hat · Multicluster Global Hub 1.4.9

  • unaffected 1788355417 – < *

• Red Hat · Multicluster Global Hub 1.5.8

  • unaffected 1789515408 – < *

• Red Hat · Multicluster Global Hub 1.5.8

  • unaffected 1789515288 – < *

• Red Hat · Multicluster Global Hub 1.5.8

  • unaffected 1789478830 – < *

• Red Hat · Multicluster Global Hub 1.6.6

  • unaffected 1790085494 – < *

• Red Hat · Multicluster Global Hub 1.6.6

  • unaffected 1790086176 – < *

• Red Hat · Multicluster Global Hub 1.6.6

  • unaffected 1790085268 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.11

  • unaffected 1787262214 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.11

  • unaffected 1787263584 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.13

  • unaffected 1787259284 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.13

  • unaffected 1787263693 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.14

  • unaffected 1786976940 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.14

  • unaffected 1787170830 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.15

  • unaffected 1787238598 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.15

  • unaffected 1787240030 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16

  • unaffected 1787242135 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16

  • unaffected 1787242321 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.17

  • unaffected 1787242131 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.17

  • unaffected 1787242108 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: unaffected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: unaffected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: unaffected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: unaffected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: affected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: affected

• Red Hat · Red Hat Openshift Data Foundation 4

  All versions: unaffected

• Red Hat · Red Hat Openshift Data Foundation 4

  All versions: unaffected

• Red Hat · Red Hat Openshift Data Foundation 4

  All versions: unaffected

What to do

Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2026-60322 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2026-66792](https://cveledger.app/badge/CVE-2026-66792.svg)](https://cveledger.app/cve/CVE-2026-66792)

Record last updated 29 Sept 2026, 16:44 UTC.