Security Advisory

CVE-2026-75924

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-18 16:27:58

Last updated 2026-08-18 17:58:03

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests (CSRs), which could lead to information disclosure and privilege escalation within the cluster.

← Browse all CVEs View on cve.org ↗