A vulnerability in the multicloud-operators-channel component of Red Hat Advanced Cluster Management for Kubernetes 2.11 allows a tenant with Channel create permissions to bypass authorization controls. Specifically, the flaw permits cross-namespace mutation of Secrets and ConfigMaps by manipulating how the system handles user-controlled keys referencing Secrets in different namespaces. This confused deputy vulnerability can lead to privilege escalation within the cluster by enabling unauthorized modification of sensitive information across namespaces.

An attacker with Channel create permissions can modify Secrets in namespaces they should not have access to, potentially gaining unauthorized access to sensitive information or escalating privileges within the Kubernetes cluster. The vulnerability affects confidentiality and integrity but does not impact availability. The CVSS 3.1 base score is 6.4 (medium severity) with network attack vector, low complexity, low privileges required, no user interaction, and scope change.

Restrict the creation of Channel resources to trusted administrators only. Limiting Channel create permissions reduces the attack surface and prevents unauthorized tenants from exploiting this confused deputy vulnerability. Follow the official Red Hat advisory for detailed guidance and monitor for updates.