01 Record

CVE-2026-73266

Clusterclaims-controller: clusterclaims-controller: tenant-controlled clusterclaim labels propagated to managedcluster enabling cross-tenant managedclusterset join

HighPUBLISHEDCNA: redhat

Base score7.1 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

View raw JSON CVE Program record

02 Description

Clusterclaims-controller: clusterclaims-controller: tenant-controlled clusterclaim labels propagated to managedcluster enabling cross-tenant managedclusterset join

03 Metadata

Published: 2026-08-13 16:36Z1 DAY AGO
Last updated: 2026-08-13 16:36Z1 DAY AGO
Reserved: 2026-08-11
Assigning CNA: redhat
Record state: PUBLISHED
Severity: High (CVSS 7.1)
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Weaknesses: CWE-441
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 846c664c43d500cc9add731f80c01c2fef1e9cb7304fc888176980a8fbd0e384

04 Affected products

VendorProductVersionsPlatforms

Red HatMulticluster Engine for KubernetesNot specified—

05 References

access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-73266vdb-entryx_refsource_REDHAT
bugzilla.redhat.comRHBZ#2514217https://bugzilla.redhat.com/show_bug.cgi?id=2514217issue-trackingx_refsource_REDHAT