The vulnerability CVE-2026-75485 affects the must-gather tool in Red Hat Advanced Cluster Management for Kubernetes 2. The cluster Proxy object is collected without redaction, bypassing the sanitization normally provided by the 'oc inspect' command. This leads to the exposure of proxy basic-auth credentials in the must-gather archive, which may be shared with support or stored externally. The flaw requires local access to the must-gather archive and low privileges within the cluster. The impact is limited to confidentiality, with no integrity or availability effects. Red Hat has not provided an official fix or patch at this time. The vendor advisory recommends restricting access to must-gather archives and manually inspecting and redacting sensitive proxy credentials before sharing the archive externally.

The vulnerability exposes proxy basic-auth credentials in cleartext within the must-gather archive. This can lead to unauthorized disclosure of sensitive authentication information if the archive is accessed by unauthorized personnel. There is no impact on data integrity or system availability. The attack requires local access to the must-gather archive and low privileges within the cluster environment. The confidentiality impact is rated high, but overall severity is medium due to the required access conditions.

No official patch or fix is currently available for this vulnerability. To mitigate the risk, restrict access to must-gather archives to authorized personnel only. Before sharing must-gather archives, especially with external parties, manually inspect and redact any sensitive information, including proxy basic-auth credentials, from the cluster Proxy object within the archive. Follow vendor guidance as provided in the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-75485 for updates.