{"id":"CVE-2026-66780","revision":"912dd5b696734186ae4aec023ca8e6e1","records":[{"revision":"912dd5b696734186ae4aec023ca8e6e1","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-66780","aliases":[],"title":"Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity","description":"A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters' endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.","state":0,"publishedAt":"2026-08-18T17:32:00.879+00:00","modifiedAt":"2026-10-19T17:01:55.013+00:00","affected":[{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-addon-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-addon-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1789135606\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.11::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-addon-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-addon-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1789131397\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.13::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-addon-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-addon-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1789136328\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.14::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-addon-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-addon-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1789136327\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.15::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-addon-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-addon-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1789136320\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.16::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-addon-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-addon-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1787854416\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.16::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/subctl-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/subctl-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1790670243\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.16::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-rhel9-operator","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-rhel9-operator\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1790670912\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.16::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/subctl-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/subctl-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1788105072\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.17::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-rhel9-operator","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-rhel9-operator\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1788073481\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.17::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhacm2/submariner-addon-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhacm2/submariner-addon-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1788572527\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:acm:2.17::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhacm2/submariner-operator-bundle","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhacm2/submariner-operator-bundle\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:acm:2\"\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":6.5,"severity":"MEDIUM"}],"references":["https://access.redhat.com/errata/RHSA-2026:63016","https://access.redhat.com/errata/RHSA-2026:67538","https://access.redhat.com/errata/RHSA-2026:67539","https://access.redhat.com/errata/RHSA-2026:67540","https://access.redhat.com/errata/RHSA-2026:67541","https://access.redhat.com/errata/RHSA-2026:67542","https://access.redhat.com/errata/RHSA-2026:67543","https://access.redhat.com/errata/RHSA-2026:72880","https://access.redhat.com/errata/RHSA-2026:85227","https://access.redhat.com/security/cve/CVE-2026-66780","https://bugzilla.redhat.com/show_bug.cgi?id=2507524"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-66780","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-66780","identifiers":["CVE-2026-66780"]},"retained":false,"historicalAffected":[]}],"coverage":[]}