The vulnerability CVE-2026-4740 affects Open Cluster Management (OCM) in Red Hat Advanced Cluster Management for Kubernetes. It stems from improper validation of Kubernetes client certificate renewal, permitting a managed cluster administrator to forge a client certificate that can be accepted by the OCM controller. This certificate forgery leads to cross-cluster privilege escalation, which may allow an attacker to assume control over other managed clusters, including the central hub cluster. The issue is classified under CWE-295 (Improper Certificate Validation) and has a CVSS v3.1 score of 8.2, indicating high impact on confidentiality, integrity, and availability. According to the Red Hat advisory, no suitable mitigation or patch currently exists that satisfies their product security criteria.

Successful exploitation of this vulnerability allows a managed cluster administrator to forge client certificates that the OCM controller will approve, leading to cross-cluster privilege escalation. This could enable an attacker to gain control over other managed Kubernetes clusters, including the hub cluster, thereby compromising confidentiality, integrity, and availability of multiple clusters managed by the system.

As per the Red Hat advisory, no mitigation or patch currently meets the criteria for ease of use, deployment, applicability, or stability. Users are advised to monitor Red Hat advisories for updates. Customers with a Technical Account Manager (TAM) or RHEL Security Select Add-on can consult directly with Red Hat for guidance. Until a fix is available, limiting administrative privileges and closely controlling managed cluster administrator access may reduce risk, but no official mitigation is provided.