CVE-2026-75924
Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in Managed ServiceAccount Addon

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: redhat-SADP

Description
A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests (CSRs), which could lead to information disclosure and privilege escalation within the cluster.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-09-08
AI Q&A
2026-08-18
EPSS Evaluated
2026-09-07
NVD
CVE-2026-75924
EUVD
EUVD-2026-61044

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
red_hat advanced_cluster_management_for_kubernetes *
red_hat managed_serviceaccount *
open_cluster_management_io managed_serviceaccount *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-75924 is a flaw in the managed-serviceaccount component of Red Hat Advanced Cluster Management for Kubernetes. The addon-manager pod has excessive permissions due to its ClusterRole, allowing it to read any secret across all namespaces and approve arbitrary Certificate Signing Requests (CSRs). This could lead to unauthorized access and privilege escalation within the cluster.

Detection Guidance

Check for pods running with the addon-manager ClusterRole in your Kubernetes cluster. Inspect ClusterRole bindings for excessive permissions. Monitor for unauthorized secret access or CSR approvals in audit logs. Use commands like kubectl get pods -n <namespace> -l app=addon-manager and kubectl get clusterrolebindings to identify misconfigurations.

Impact Analysis

A compromised addon-manager pod could access sensitive secret data across all namespaces, leading to information disclosure. It could also approve unauthorized CSRs, enabling privilege escalation and full control over the cluster environment.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for data protection standards like GDPR and HIPAA. Information disclosure and unauthorized privilege escalation may result in regulatory penalties and loss of trust.

Mitigation Strategies

Since no effective mitigation is currently available per Red Hat, monitor for updates and restrict access to the addon-manager pod. Limit network exposure and review audit logs for suspicious activity. Consider isolating the pod or disabling the managed-serviceaccount component if feasible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75924. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart