Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-17T19:10:00 search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CWE-269

A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve `system:masters` access, granting them full control over the cluster.

A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve `system:masters` access, granting them full control over the cluster.

Critical: This flaw in search-v2-operator allows an attacker who gains a foothold in any of the four pods running under the `search-serviceaccount` to achieve cluster-wide `system:masters` privileges. This escalation of privilege poses a severe risk to the integrity and control of the Red Hat Advanced Cluster Management for Kubernetes environment. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Advanced Cluster Management for Kubernetes 2.11 2026-08-26T00:00:00Z RHSA-2026:60387 rhacm2/acm-search-v2-rhel9:1787688827 Red Hat Advanced Cluster Management for Kubernetes 2.13 2026-08-26T00:00:00Z RHSA-2026:60390 rhacm2/acm-search-v2-rhel9:1787682112 Red Hat Advanced Cluster Management for Kubernetes 2.14 2026-08-26T00:00:00Z RHSA-2026:60388 rhacm2/acm-search-v2-rhel9:1787682033 Red Hat Advanced Cluster Management for Kubernetes 2.15 2026-08-26T00:00:00Z RHSA-2026:60389 rhacm2/acm-search-v2-rhel9:1787681674 Red Hat Advanced Cluster Management for Kubernetes 2.16 2026-08-26T00:00:00Z RHSA-2026:60391 rhacm2/acm-search-v2-rhel9:1787681686 Red Hat Advanced Cluster Management for Kubernetes 2.17 2026-08-26T00:00:00Z RHSA-2026:60386 rhacm2/acm-search-v2-rhel9:1787681651 Red Hat Advanced Cluster Management for Kubernetes 2 Affected rhacm2/search-collector-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-70495 https://nvd.nist.gov/vuln/detail/CVE-2026-70495