CVE-2026-67567
CriticalCVSS 9.9Summary
A vulnerability in the multicloud-operators-subscription component allows a tenant with permissions to create HelmRelease custom resources to bypass security controls. The HelmRelease controller processes chart templates with elevated ServiceAccount privileges without proper validation, enabling deployment of arbitrary resources across the cluster.
Risk Assessment
The risk includes full cluster compromise, privilege escalation, and unauthorized access to resources.
Recommendation
Immediately restrict permissions to create HelmRelease resources and apply vendor-provided patches.
Original NVD description (English source)
A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resources (CRs), to bypass existing security controls. The system's HelmRelease controller processes Helm chart templates using its own elevated ServiceAccount privileges without proper validation. This enables the tenant to deploy arbitrary resources across the entire cluster, leading to a significant security compromise.