← CVE Intelligence

CVE-2026-4740

Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation PUBLISHED

Description (CNA)

A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege escalation and may allow an attacker to gain control over other managed clusters, including the hub cluster.

Affected (CNA)

Vendor / productVersions
Red Hat / multicluster engine for Kubernetes 2.1unaffected 1776881164 before *
Red Hat / multicluster engine for Kubernetes 2.11unaffected 1777478390 before *
Red Hat / multicluster engine for Kubernetes 2.6unaffected 1775977180 before *
Red Hat / multicluster engine for Kubernetes 2.8unaffected 1775638726 before *
Red Hat / multicluster engine for Kubernetes 2.9unaffected 1776445095 before *
Red Hat / Multicluster Engine for Kubernetesunknown
Red Hat / Multicluster Engine for Kubernetesunknown
Red Hat / Multicluster Engine for Kubernetesunknown
Red Hat / Multicluster Engine for Kubernetesunknown
Red Hat / Multicluster Engine for Kubernetesunknown
Red Hat / Multicluster Engine for Kubernetesunknown

CWE

CWE-295

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege escalation and may allow an attacker to gain control over other managed clusters, including the hub cluster.