Threats tagged 'ghsa-38c7-8hx4-q72m'

A vulnerability in Ansible Operator Plugins allows a low-privileged Kubernetes user to exploit a Jinja2 template injection by crafting malicious custom resource specifications. This flaw enables execution of arbitrary code within the operator pod, potentially escalating privileges to the operator's service account with cluster-wide permissions. The issue is tracked as CVE-2026-92982 with a high severity score of 8.5. Red Hat has issued an advisory addressing this vulnerability in the context of Red Hat OpenShift Service Mesh, specifically in Kiali 2.27.4. The advisory confirms the availability of a fix.