{}

{}

{}

{"bugzilla": {"description": "console: console: stored DOM XSS via unescaped pod logs in document.write", "id": "2508666", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508666"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-79", "details": ["A flaw was found in the console component. An attacker who can write to container logs on a managed cluster can inject malicious code into the hub console user's browser session. This occurs when the user views raw pod logs, as the console does not properly escape the log content. Successful exploitation could lead to session hijacking, credential theft, or unauthorized actions performed on behalf of the console user."], "mitigation": {"lang": "en:us", "value": "To reduce the risk of exploitation, ensure strict access controls are enforced on managed clusters, limiting the ability of untrusted users to deploy or modify pods and thus inject malicious content into container logs. Additionally, users should exercise caution when viewing \"Raw\" logs from potentially untrusted sources within the hub console."}, "name": "CVE-2026-66805", "package_state": [{"cpe": "cpe:/a:redhat:multicluster_engine", "fix_state": "Affected", "package_name": "multicluster-engine/console-mce-rhel9", "product_name": "Multicluster Engine for Kubernetes"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "package_name": "rhacm2/console-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}], "public_date": "2026-08-10T20:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-66805\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-66805\nhttps://issues.redhat.com/browse/ACM-38692"], "statement": "This is an Important flaw where an attacker with the ability to write to container logs on a managed cluster can inject malicious HTML/JavaScript. When a Red Hat Advanced Cluster Management for Kubernetes console user views these raw pod logs, the injected code executes in their browser session, potentially leading to session hijacking or credential theft. Exploitation requires both attacker control over pod output and specific user interaction.", "threat_severity": "Important"}

{}