Description (CNA)
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16 | unaffected 1790670439 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16 | unaffected 1790670231 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16 | unaffected 1790670243 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16 | unaffected 1790670508 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16 | unaffected 1790670233 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16 | unaffected 1790670912 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16 | unaffected 1790670254 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17 | unaffected 1788023916 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17 | unaffected 1788023940 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17 | unaffected 1788105072 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17 | unaffected 1788043964 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17 | unaffected 1788043961 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17 | unaffected 1788073481 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17 | unaffected 1788043970 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2 | affected |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2 | affected |
CWE
CWE-94
References
- https://access.redhat.com/errata/RHSA-2026:63016
- https://access.redhat.com/errata/RHSA-2026:85227
- https://access.redhat.com/security/cve/CVE-2026-66786
- https://bugzilla.redhat.com/show_bug.cgi?id=2507531
ADP enrichment
No English description supplied.
No references supplied.