CVE-2026-66793: Control Bypass in RHOAM GovernancePolicy AddOn Enables Priv Escalation
CVE-2026-66793 Published on August 18, 2026
Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controlled image with cluster-admin privileges on the managed cluster, leading to arbitrary code execution and privilege escalation.
Vulnerability Analysis
CVE-2026-66793 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Timeline
Reported to Red Hat.
Made public. 22 days later.
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2026-66793
Want to know whenever a new CVE is published for Red Hat Acm? stack.watch will email you.
Affected Versions
Red Hat Advanced Cluster Management for Kubernetes 2.11:- Version 1787683327 and below * is unaffected.
- Version 1787259078 and below * is unaffected.
- Version 1787080755 and below * is unaffected.
- Version 1787238535 and below * is unaffected.
- Version 1787080753 and below * is unaffected.
- Version 1787227696 and below * is unaffected.