This vulnerability exists in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management for Kubernetes 2. The HelmRelease controller processes Helm chart templates using its own elevated ServiceAccount privileges without proper validation. A tenant able to create HelmRelease custom resources can exploit this to bypass security controls and deploy arbitrary resources across the entire cluster, resulting in a significant security compromise and privilege escalation. The vulnerability is classified as an unintended proxy or intermediary ('Confused Deputy') issue (CWE-441). The CVSS v3.1 base score is 9.9, indicating critical severity with network attack vector, low complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability with changed scope.

An attacker with the ability to create HelmRelease custom resources can leverage the elevated privileges of the HelmRelease controller's ServiceAccount to deploy arbitrary resources cluster-wide. This bypasses intended namespace and Group-Version-Kind (GVK) restrictions, enabling significant privilege escalation and full compromise of the Kubernetes cluster's security posture. The impact includes complete loss of confidentiality, integrity, and availability of the cluster resources.

No official patch or fix is currently confirmed by Red Hat. To mitigate this vulnerability, restrict the ability of untrusted tenants to create HelmRelease custom resources by implementing strict Role-Based Access Control (RBAC) policies. Limit which users or service accounts can create or modify HelmRelease objects to prevent unauthorized exploitation of the controller's elevated privileges. Monitor Red Hat's official advisory for updates on patches or fixes.