{}

{}

{}

{"bugzilla": {"description": "hypershift-addon-operator: hypershift-addon-operator: unsanitized hub ConfigMap data passed as CLI arguments to privileged install Job (argument injection)", "id": "2509774", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509774"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.7", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-88", "details": ["A flaw was found in hypershift-addon-operator. A hub-cluster administrator with write access to the hypershift-operator-install-flags ConfigMap can inject malicious command-line arguments into the privileged install Job. This vulnerability, known as argument injection, allows the attacker to pull arbitrary container images and gain full administrative control (cluster-admin code execution) on managed spoke clusters."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-66808", "package_state": [{"cpe": "cpe:/a:redhat:multicluster_engine", "fix_state": "Affected", "impact": "important", "package_name": "multicluster-engine/hypershift-addon-rhel9-operator", "product_name": "Multicluster Engine for Kubernetes"}], "public_date": "2026-08-06T20:21:07Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-66808\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-66808\nhttps://github.com/stolostron/hypershift-addon-operator/pull/766"], "statement": "This Important flaw in Multicluster Engine for Kubernetes allows a hub-cluster namespace administrator with write access to the `hypershift-operator-install-flags` ConfigMap to inject arbitrary command-line arguments into a privileged install Job. This enables privilege escalation to cluster-admin on managed spoke clusters, bypassing security boundaries within the multi-cluster environment.", "threat_severity": "Important"}

{}