HIGH 8.8 NVD

CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controlled image with cluster-admin privileges on the managed cluster, leading to arbitrary code execution and privilege escalation.

References

https://access.redhat.com/security/cve/CVE-2026-66793
https://bugzilla.redhat.com/show_bug.cgi?id=2507538

Published: 2026-08-18 · Source: NVD · Feed updated: 2026-08-18

This high severity vulnerability with a CVSS score of 8.8 was published on 2026-08-18 via NVD.

vulnfeed aggregates 11140 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.