CVE-2026-110744

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in multicluster-global-hub-operator-bundle

Publication date: 2026-10-21

Last updated on: 2026-10-23

Assigner: redhat-SADP

Description

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC) permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator or obtains its service account credentials can exploit this flaw to achieve privilege escalation, gaining full administrative control over the cluster.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-23

Generated

2026-11-10

AI Q&A

2026-10-22

EPSS Evaluated

2026-11-09

NVD

CVE-2026-110744

EUVD

EUVD-2026-107418

Affected Vendors & Products

Vendor	Product	Version / Range
red_hat	multicluster_global_hub_operator_bundle	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

CVE-2026-110744 is a flaw in the multicluster-global-hub-operator-bundle where the operator has overly broad RBAC permissions. This allows it to impersonate any users, groups, or service accounts across the cluster without restrictions. If compromised, an attacker can escalate privileges to gain full administrative control over the Kubernetes cluster.

Impact Analysis

If an attacker exploits this flaw, they can gain full administrative access to your cluster. This includes taking over privileged groups like system:masters, allowing them to read, modify, or delete any resources. The impact is severe as it can lead to complete cluster compromise.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements under GDPR, HIPAA, and other regulations. Full administrative access allows attackers to exfiltrate sensitive data, leading to legal and financial penalties.

Mitigation Strategies

Monitor Red Hat's advisories for updates as no official fix is available. Avoid exposing the operator's service account credentials or pod to untrusted networks. Restrict access to the operator and its permissions until a patch is released.

Hi! I’m here to help you understand CVE-2026-110744. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...