This vulnerability in Open Cluster Management (OCM) affects Red Hat Advanced Cluster Management for Kubernetes. It stems from improper validation of Kubernetes client certificate renewal requests. A managed cluster administrator can exploit this flaw to forge a client certificate that the OCM controller accepts, resulting in cross-cluster privilege escalation. This escalation may allow control over other managed clusters and the hub cluster. The CVSS 3.1 score is 8.2 (High), with attack vector local, low attack complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been published yet. The vendor advisory is available but does not specify a fix or mitigation status.

Successful exploitation allows a managed cluster administrator to forge client certificates that the OCM controller approves, enabling cross-cluster privilege escalation. This could lead to an attacker gaining control over multiple managed clusters and the central hub cluster, severely impacting confidentiality, integrity, and availability of the Kubernetes cluster management environment.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-4740 for current remediation guidance. Until a fix is available, restrict managed cluster administrator privileges and monitor for unusual certificate renewal activities. Follow any vendor recommendations once published.