The managedcluster-import-controller component of Red Hat OpenShift Multicluster Engine improperly validates incoming CSRs by not verifying the signer name or decoding the PEM-encoded x509 CSR. This vulnerability enables a privileged service account on a spoke cluster to submit a malicious CSR that can be auto-approved, leading to privilege escalation. Successful exploitation grants the attacker cluster-admin privileges on the hub cluster, compromising the security of the multicluster environment. The issue is tracked as CWE-295 (Improper Certificate Validation) and carries a CVSS 3.1 score of 9.9, indicating critical severity.

Exploitation of this vulnerability allows a compromised privileged service account on a spoke cluster to escalate privileges and obtain administrative credentials on the hub cluster. This results in a complete compromise of the hub cluster's security, including confidentiality, integrity, and availability. The vulnerability affects the overall security posture of the multicluster environment, posing a significant risk to organizations using Red Hat OpenShift Multicluster Engine.

As per the Red Hat advisory, no mitigation or patch currently meets the criteria for ease of use, applicability, or stability. Users should monitor the official Red Hat advisory for updates. Until a fix is available, restricting access to privileged service accounts on spoke clusters and limiting exposure of the managedcluster-import-controller may reduce risk, but no definitive mitigation is provided by the vendor.