Threats Tagged 'ghsa-vr7g-637m-v9mm'
View all threats tagged with 'ghsa-vr7g-637m-v9mm'. Filter and sort to focus on specific types of threats.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-vr7g-637m-v9mm'
Click on any threat for detailed analysis and mitigation recommendations
GCVE Database · 07/24/2026, 18:56:05 UTC 0 A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster. Join the discussion | GCVE Database | 07/24/2026, 18:56:05 UTC Added: 07/25/2026, 23:09:28 UTC |
Showing 1 to 1 of 1 result
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console → Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.