CVE-2026-66792

Beschreibung

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller-s Service Account, potentially leading to unauthorized access and control over cluster resources.