A critical vulnerability exists in the submariner-operator component where the `submariner-k8s-broker-cluster` Role assigned to joined clusters has excessive permissions. This flaw allows a compromised cluster to overwrite endpoint information of other clusters, enabling an attacker to redirect inter-cluster tunnel traffic and perform a Man-in-the-Middle (MITM) attack across the cluster mesh.