« Volver al listado

CVE-2026-73267

Estado: Pendiente de análisisAlta (7.7)—

A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the `spec.namespace` field. This allows the tenant to specify and delete any ManagedCluster, including the hub's local-cluster or other tenants' clusters, due to a missing ownership check. This vulnerability can lead to a denial of service by enabling unauthorized deletion of ManagedClusters.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vector CVSS AV:N/PR:L sin UI permite explotación remota con autenticación. CWE-602 (missing ownership check) y capacidad de borrar ManagedClusters implica DoS. La pista sugiere T1210 e impacto T1499.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningThreat Intelligence ProgramPrivileged Account ManagementNetwork SegmentationFilter Network TrafficDisable or Remove Feature or Program

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Redhat — Clusterclaims ControllerAIRedhat — Multicluster EngineAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-73267",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-73267",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-08-25T15:34:54.106824Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secalert@redhat.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.7,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 3.1
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.10::el9"
          ],
          "vendor": "Red Hat",
          "product": "multicluster engine for Kubernetes 2.10",
          "versions": [
            {
              "status": "unaffected",
              "version": "1787196014",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.11::el9"
          ],
          "vendor": "Red Hat",
          "product": "multicluster engine for Kubernetes 2.11",
          "versions": [
            {
              "status": "unaffected",
              "version": "1787239442",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.17::el9"
          ],
          "vendor": "Red Hat",
          "product": "multicluster engine for Kubernetes 2.17",
          "versions": [
            {
              "status": "unaffected",
              "version": "1786577950",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.6::el9"
          ],
          "vendor": "Red Hat",
          "product": "multicluster engine for Kubernetes 2.6",
          "versions": [
            {
              "status": "unaffected",
              "version": "1787259112",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "multicluster engine for Kubernetes 2.8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1787259059",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "multicluster engine for Kubernetes 2.9",
          "versions": [
            {
              "status": "unaffected",
              "version": "1787195995",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-08-21T03:16:39.080",
  "references": [
    {
      "url": "https://access.redhat.com/errata/RHSA-2026:59556",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2026:59557",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2026:59558",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2026:59559",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2026:59579",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2026:59593",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/security/cve/CVE-2026-73267",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514218",
      "source": "secalert@redhat.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secalert@redhat.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-602"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the `spec.namespace` field. This allows the tenant to specify and delete any ManagedCluster, including the hub's local-cluster or other tenants' clusters, due to a missing ownership check. This vulnerability can lead to a denial of service by enabling unauthorized deletion of ManagedClusters."
    }
  ],
  "lastModified": "2026-09-29T20:17:23.420",
  "sourceIdentifier": "secalert@redhat.com"
}