CVE-2026-70398
CriticalCVSS 9.6Summary
A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user (tenant) to manipulate the GitOpsCluster controller, redirecting sensitive spoke cluster bearer tokens from secure locations to a namespace they control. This can lead to disclosure of critical information and bypass of security policies within ArgoCD AppProjects.
Risk Assessment
Disclosure of access tokens to managed clusters, potentially leading to unauthorized access and security breaches.
Recommendation
Apply Red Hat patches for the multicloud-integrations component and monitor user permissions in RHACM.
Original NVD description (English source)
A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer tokens from secure locations to a namespace they control. This unauthorized access to tokens can lead to the disclosure of critical information and bypass security policies within ArgoCD AppProjects.