CVE-2026-73834

Awaiting Analysis Awaiting Analysis - Queue

Red Hat Advanced Cluster Management must-gather credential exposure

Publication date: 2026-08-18

Last updated on: 2026-09-05

Assigner: redhat-SADP

Description

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulting archive, potentially exposing sensitive information to anyone with access to the archive.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-09-05

Generated

2026-09-07

AI Q&A

2026-08-18

EPSS Evaluated

2026-09-06

NVD

CVE-2026-73834

EUVD

EUVD-2026-60958

Affected Vendors & Products

Vendor	Product	Version / Range
red_hat	advanced_cluster_management_for_kubernetes	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-312	The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

Executive Summary

This vulnerability is in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. When administrators run must-gather for troubleshooting, it collects certain ACM wrapper Custom Resources that contain embedded Secret data without redacting them. This results in credentials and tokens being captured in cleartext within the must-gather archive, exposing sensitive information to anyone with access to the archive.

Detection Guidance

To detect this vulnerability, inspect must-gather archives for cleartext secrets in ACM wrapper Custom Resources. Check for embedded Secret data in collected resources by examining the archive contents manually or using tools like grep for sensitive patterns (e.g., passwords, tokens).

Commands: grep -r 'password' must-gather-archive/ or grep -r 'token' must-gather-archive/. Review all Custom Resource files for embedded Secret fields.

Impact Analysis

If you are an administrator using must-gather, this vulnerability could expose your credentials, tokens, or other sensitive data in cleartext within the archive. Anyone with access to the archive could potentially misuse this information, leading to unauthorized access or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized exposure of sensitive data, which may violate compliance requirements under GDPR, HIPAA, or other regulations. The high confidentiality impact (CVSS 5.5) indicates a significant risk of non-compliance due to potential data leaks.

Mitigation Strategies

Avoid uploading must-gather archives containing sensitive data to support cases. Review and redact any cleartext secrets in ACM wrapper Custom Resources before sharing archives. Monitor Red Hat's official updates for patches or mitigations.

Hi! I’m here to help you understand CVE-2026-73834. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70