Threat Intelligence Database

CVE-2026-70496 is a critical vulnerability in Red Hat Advanced Cluster Management for Kubernetes 2.11 affecting the search-v2-operator. The operator's ClusterRole is assigned excessive privileges equivalent to a cluster administrator, enabling it to impersonate other entities, modify RBAC configurations, approve CSRs, and manage ManifestWork. This over-privileging can lead to privilege escalation within the Kubernetes cluster. Red Hat has issued security advisories recommending updates to later versions that address this and other vulnerabilities. No known exploits are reported in the wild at this time.

A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control (RBAC) configurations, approve Certificate Signing Requests (CSRs), and manage ManifestWork. This grants excessive privileges beyond what is necessary for the operator's intended function, potentially leading to privilege escalation within the cluster.