This vulnerability affects the search-v2-operator component of Red Hat Advanced Cluster Management for Kubernetes 2. A privileged user with edit permissions on Search Custom Resources can manipulate fields such as imageOverride, arguments, and environment variables without validation. This allows the attacker to inject arbitrary container images or mount arbitrary secrets into pods, leveraging the associated ServiceAccount's cluster-wide impersonation capabilities to escalate privileges and potentially compromise the entire Kubernetes cluster. The vulnerability has a CVSS v3.1 score of 9.1 (critical) with network attack vector, low complexity, high privileges required, no user interaction, and changed scope. The vendor advisory recommends restricting permissions on Search CRs to trusted users via RBAC to mitigate the risk. No official fix or patch is currently confirmed in the advisory.

If exploited by a privileged Custom Resource editor, this vulnerability can lead to privilege escalation and full cluster compromise. The attacker can inject malicious container images or mount arbitrary secrets into pods, abusing the ServiceAccount's extensive impersonation permissions. This compromises confidentiality, integrity, and availability of the Kubernetes cluster managed by Red Hat Advanced Cluster Management.

No official patch or fix is currently confirmed. The vendor advisory recommends mitigating this vulnerability by restricting permissions to create and modify Search Custom Resources to only trusted and authorized users. Implement Kubernetes Role-Based Access Control (RBAC) policies to limit create, update, and patch operations on search.search.open-cluster-management.io resources. This reduces the attack surface by preventing unauthorized privileged users from exploiting unsanitized input fields.