CVE-2026-71471

Received Received - Intake

Remote Code Execution in acm-search-v2-rhel9

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: Red Hat, Inc.

Description

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exploit a vulnerability in the `Collector.ImageOverride` field. This allows the attacker to deploy an arbitrary container image across all managed clusters. The consequence is remote code execution (RCE), enabling the attacker to execute commands and potentially access sensitive information across the entire fleet of managed clusters.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-12

Generated

2026-08-13

AI Q&A

2026-08-13

EPSS Evaluated

N/A

NVD

CVE-2026-71471

EUVD

EUVD-2026-57686

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	acm-search-v2-rhel9	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-829	The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Attack-Flow Graph

Executive Summary

This vulnerability is in acm-search-v2-rhel9. An attacker with admin privileges on the hub cluster can exploit the Search Custom Resource (CR) patch access to manipulate the Collector.ImageOverride field. This lets them deploy any container image across all managed clusters, leading to remote code execution (RCE).

Impact Analysis

If exploited, an attacker could execute arbitrary commands and access sensitive data across all managed clusters. This could lead to data breaches, unauthorized system access, or further compromise of the entire cluster environment.

Compliance Impact

This vulnerability could lead to unauthorized access and data exposure, violating compliance requirements like GDPR (data protection) and HIPAA (health data security). Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Restrict administrative privileges on the hub cluster, particularly patch access to the Search Custom Resource (CR). Remove or limit the ability to modify the Collector.ImageOverride field to prevent unauthorized container image deployment.

Hi! I’m here to help you understand CVE-2026-71471. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70