CVE-2026-4740

HighCVSS 8.2/10Last modified Oct 26, 2026

Description

A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege escalation and may allow an attacker to gain control over other managed clusters, including the hub cluster.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-295

Affected software

VendorProductVersions
Red Hatmulticluster engine for Kubernetes 2.1—
Red Hatmulticluster engine for Kubernetes 2.11—
Red Hatmulticluster engine for Kubernetes 2.6—
Red Hatmulticluster engine for Kubernetes 2.8—
Red Hatmulticluster engine for Kubernetes 2.9—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red Hatmulticluster engine for Kubernetes 2.1—
Red Hatmulticluster engine for Kubernetes 2.11—
Red Hatmulticluster engine for Kubernetes 2.6—
Red Hatmulticluster engine for Kubernetes 2.8—
Red Hatmulticluster engine for Kubernetes 2.9—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—
Red HatMulticluster Engine for Kubernetes—

References

Timeline

Published
Apr 7, 2026
Last modified
Oct 26, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-474058.8PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a broken workspace authoriCVE-2026-474068.1PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object CVE-2026-474079.4PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the Platform server exposes resCVE-2026-474086.5PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object CVE-2026-474098.1PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enCVE-2026-47418.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TeamJCD JoyConDroid (app/src/main/java/com/rCVE-2026-474109.8PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptoCVE-2026-474116.5PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enCVE-2026-474128.1PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enCVE-2026-474139.6PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have aprivilege escalation / crCVE-2026-474147.6PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object CVE-2026-474158.3PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object
CVE-2026-4740: High severity, CVSS 8.2 | Vulnix