CVE-2026-10059

{"id": "CVE-2026-10059", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-10059", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-05T14:21:58.044319Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/a:redhat:multicluster_engine:2.10::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.1", "versions": [{"status": "unaffected", "version": "1787201612", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/cluster-curator-controller-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.11::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.11", "versions": [{"status": "unaffected", "version": "1787238383", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/cluster-curator-controller-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.6::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "versions": [{"status": "unaffected", "version": "1787264185", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/cluster-curator-controller-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.8::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "versions": [{"status": "unaffected", "version": "1787259011", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/cluster-curator-controller-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.9::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "versions": [{"status": "unaffected", "version": "1787201646", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/cluster-curator-controller-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}]}], "published": "2026-08-05T09:18:13.720", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:59556", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:59557", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:59558", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:59559", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:59579", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-10059", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483187", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-266"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a token for a ServiceAccount with cluster-wide administrative authority. This leads to a privilege escalation, allowing the tenant administrator to gain full control over the cluster."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en el controlador ClusterCurator de Multicluster Engine para Kubernetes. Un administrador de inquilinos con privilegios de \u00e1mbito de espacio de nombres puede explotar esta vulnerabilidad al crear un ClusterCurator con \u00e1mbito de espacio de nombres. Esta acci\u00f3n otorga inadvertidamente al administrador de inquilinos la capacidad de acu\u00f1ar un token para una ServiceAccount con autoridad administrativa de \u00e1mbito de cl\u00faster. Esto conduce a una escalada de privilegios, lo que permite al administrador de inquilinos obtener control total sobre el cl\u00faster."}], "lastModified": "2026-10-23T21:10:00.157", "sourceIdentifier": "secalert@redhat.com"}