{"apiVersion":"1.0","identifier":"CVE-2026-73266","description":"A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exploit this vulnerability by manipulating ClusterClaim labels. This allows the tenant to force a cluster to join a ManagedClusterSet belonging to another tenant. Such unauthorized access could enable the injection of policies and workloads into other tenants- clusters.","publishedAt":"2026-08-13T17:17:35","lastModifiedAt":"2026-08-25T21:17:45","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73266","cvssScore":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","epssProbability":0.00215,"riskScore":0.72,"affectedProduct":"Multicluster Engine","affectedVersions":"unknown","vulnerabilityType":"Other","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-73266","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-73266","en":"https://www.redsauce.net/en/cves/CVE-2026-73266","fr":"https://www.redsauce.net/fr/cves/CVE-2026-73266","pt":"https://www.redsauce.net/pt/cves/CVE-2026-73266","de":"https://www.redsauce.net/de/cves/CVE-2026-73266","sk":"https://www.redsauce.net/sk/cves/CVE-2026-73266","el":"https://www.redsauce.net/el/cves/CVE-2026-73266"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-73266"}}