CVE-2026-20770

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in Cluster Management Toolkit for Kubernetes

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20770

EUVD

EUVD-2026-56493

Affected Vendors & Products

Vendor	Product	Version / Range
intel	cluster_management_toolkit_for_kubernetes	to v0.8.5 (exc)
intel	cluster_management_toolkit_for_kubernetes	to 0.8.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-693	The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

Executive Summary

This vulnerability is a protection mechanism failure in Cluster Management Toolkit for Kubernetes software before version v0.8.5. It allows a system software adversary with privileged user access to escalate privileges through a low-complexity attack. The attack requires local access, passive user interaction, and no special internal knowledge.

Detection Guidance

Detection requires checking the installed version of Intel Cluster Management Toolkit for Kubernetes. If the version is before v0.8.5, the system is vulnerable. No specific commands are provided in the context.

Impact Analysis

This vulnerability may lead to high impacts on confidentiality, integrity, and availability of the system. It could result in complete loss of system confidentiality, integrity, and availability if exploited. An attacker could gain elevated privileges and potentially take full control of the affected system.

Compliance Impact

This vulnerability may impact confidentiality, integrity, and availability of systems, which could lead to unauthorized access or data breaches. Such incidents could violate compliance requirements under GDPR, HIPAA, or other regulations that mandate strict data protection and access controls.

Mitigation Strategies

Update the Cluster Management Toolkit for Kubernetes to version v0.8.5 or later to address the protection mechanism failure. Ensure privileged user access is restricted and monitor for unusual local access attempts.

Hi! I’m here to help you understand CVE-2026-20770. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70