This vulnerability involves the GitOpsCluster controller in Red Hat Advanced Cluster Management's multicloud-integrations component. An authenticated user with tenant privileges can exploit this flaw to cause the controller to write sensitive spoke cluster bearer tokens into an attacker-controlled namespace. This unauthorized token redirection bypasses existing security guards and ArgoCD AppProject constraints, resulting in privilege escalation and potential disclosure of critical information. The vulnerability is classified as an unintended proxy or intermediary ('Confused Deputy') issue (CWE-441). The CVSS v3.1 score is 9.6 (critical), reflecting network attack vector, low complexity, low privileges required, no user interaction, changed scope, and high confidentiality and integrity impacts.

An authenticated tenant can exfiltrate sensitive bearer tokens from spoke clusters by redirecting them to namespaces under their control. This leads to disclosure of critical information and circumvention of security policies enforced by ArgoCD AppProjects, enabling privilege escalation within the Kubernetes environment managed by Red Hat Advanced Cluster Management.

Currently, no mitigation or patch meets Red Hat Product Security's criteria for ease of use, applicability, or stability. Users should monitor Red Hat's advisory for updates. Customers with a Technical Account Manager (TAM) or RHEL Security Select Add-on can consult directly with Red Hat for guidance. Until a fix is available, restricting tenant privileges and monitoring for suspicious activity related to GitOpsCluster controller operations may help reduce risk, but no official mitigation is provided.