RedHat OpenShift PrivEsc via ClusterCurator: CVE-2026-73269
CVE-2026-73269 Published on August 12, 2026
Cluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespace-local sa
A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-local access to cluster-wide control. This privilege escalation grants broad permissions, including the ability to access and manipulate secrets, manage cluster actions, and delete hosted clusters or node pools.
Vulnerability Analysis
CVE-2026-73269 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Timeline
Reported to Red Hat.
Made public. 1 day later.
Weakness Type
Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2026-73269
Want to know whenever a new CVE is published for Red Hat Multicluster Engine? stack.watch will email you.
Affected Versions
Red Hat multicluster engine for Kubernetes 2.1:- Version 1787201612 and below * is unaffected.
- Version 1787238383 and below * is unaffected.
- Version 1786750700 and below * is unaffected.
- Version 1787264185 and below * is unaffected.
- Version 1787259011 and below * is unaffected.
- Version 1787201646 and below * is unaffected.