The vulnerability in the search-v2-operator of Red Hat Advanced Cluster Management for Kubernetes 2.11 arises from its ClusterRole possessing permissions equivalent to a cluster administrator. This includes the ability to impersonate other entities, write RBAC configurations, approve Certificate Signing Requests, and manage ManifestWork resources. Such excessive privileges exceed the operator's intended function and can lead to privilege escalation within the Kubernetes cluster. Exploitation requires the attacker to have some level of existing access with low privileges. Red Hat has classified this flaw as Important but with a CVSS score of 9.9 due to the scope and impact of the permissions involved. No official fix or mitigation that meets Red Hat's standards for ease of use, applicability, and stability is currently available. The vulnerability is tracked under CWE-250 (Execution with Unnecessary Privileges).

An attacker with low-privileged access can leverage the excessive permissions of the search-v2-operator's ClusterRole to escalate privileges within the Kubernetes cluster. This includes impersonating other identities, modifying RBAC policies, approving CSRs, and managing ManifestWork resources, potentially leading to unauthorized code execution, data access, and disruption of cluster services. The vulnerability affects confidentiality, integrity, and availability of the cluster environment.

Currently, no mitigation or patch meeting Red Hat Product Security criteria for ease of use, applicability, and stability is available. Users should monitor Red Hat advisories for updates. Since exploitation requires existing low-privileged access, restricting initial access and following best practices for cluster access control remain important. Customers with a Red Hat Technical Account Manager (TAM) can consult directly for guidance. Applying the latest available updates for Red Hat Advanced Cluster Management for Kubernetes is recommended once a fix is released.