CVE-2026-73267Published
Clusterclaims-controller: managedcluster deletion keyed solely on clusterclaim.spec.namespace with no local ownership check
cve-program · CVE-2026-73267
Publishedmulticluster-engine/clusterclaims-controller-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "multicluster engine for Kubernetes 2.10",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1787196014",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
]
}multicluster-engine/clusterclaims-controller-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "multicluster engine for Kubernetes 2.11",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1787239442",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
]
}multicluster-engine/clusterclaims-controller-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "multicluster engine for Kubernetes 2.17",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786577950",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
]
}multicluster-engine/clusterclaims-controller-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "multicluster engine for Kubernetes 2.6",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1787259112",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
]
}multicluster-engine/clusterclaims-controller-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "multicluster engine for Kubernetes 2.8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1787259059",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
]
}multicluster-engine/clusterclaims-controller-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "multicluster engine for Kubernetes 2.9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1787195995",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
]
}Original source record · Cite this exact observation · Complete original publisher JSON