CVE-2026-70495 describes a privilege escalation vulnerability in the search-v2-operator's search-serviceaccount, which has overly broad permissions allowing cluster-wide impersonation of users and groups. An attacker with access to any pod running under this service account can exploit this to gain system:masters privileges, effectively full control over the cluster. The vulnerability is classified as CWE-269 (Improper Privilege Management) and has a CVSS v3.1 score of 8.8 (high severity). Red Hat has acknowledged the issue but currently does not have an available fix or mitigation that meets their criteria for ease of use, applicability, or stability.

Successful exploitation grants an attacker system:masters privileges across the entire Kubernetes cluster, allowing full control and compromising the integrity, confidentiality, and availability of the environment. This poses a severe risk to Red Hat Advanced Cluster Management for Kubernetes deployments.

Red Hat currently states that no mitigation or fix meeting their criteria is available. Users should monitor Red Hat advisories for updates. Until a fix or effective mitigation is released, limiting access to pods running under the search-serviceaccount and restricting attacker footholds in the cluster are prudent measures, though no official mitigations are provided by Red Hat at this time.