CVE-2026-75485 is a vulnerability in the must-gather tool of Red Hat Advanced Cluster Management for Kubernetes 2.11. The flaw causes the cluster Proxy object to be collected without the redaction normally applied by the 'oc inspect' command, exposing proxy basic-auth credentials in cleartext within the must-gather archive. This exposure can lead to unauthorized disclosure of sensitive authentication information to anyone with access to the archive. The vulnerability requires local access to the must-gather archive and low privileges within the cluster. The integrity and availability of the system are not impacted. The vulnerability is classified under CWE-532 (Insertion of Sensitive Information into Log File).

The vulnerability exposes proxy basic-auth credentials in cleartext within the must-gather archive. This could lead to unauthorized disclosure of sensitive authentication information if the archive is accessed by unauthorized users. There is no impact on system integrity or availability. Exploitation requires local access to the must-gather archive and low privileges within the cluster environment.

No official patch or fix is explicitly stated in the vendor advisory for this vulnerability. To mitigate the risk, restrict access to must-gather archives strictly to authorized personnel only. Before sharing must-gather archives, especially with external parties, manually inspect and redact any sensitive information, including proxy basic-auth credentials, from the cluster Proxy object within the archive.