CVE-2026-71473
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critical settings, leading to the replacement of container images. This ultimately results in container image injection on the managed cluster, potentially compromising its integrity.
Risk Assessment
The risk includes compromise of the managed cluster's integrity through injection of malicious container images, which can lead to unauthorized access and takeover of the cluster.
Recommendation
It is recommended to restrict administrative permissions and monitor configuration changes, as well as apply patches provided by the software vendor.
Original NVD description (English source)
A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critical settings, leading to the replacement of container images. This ultimately results in container image injection on the managed cluster, potentially compromising its integrity.