CVE-2026-66793

HighCVSS 8.8/10Last modified Aug 27, 2026

Description

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controlled image with cluster-admin privileges on the managed cluster, leading to arbitrary code execution and privilege escalation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Aug 18, 2026
Last modified: Aug 27, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-667949.3A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated CVE-2026-667959.9A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic improperly validates inc CVE-2026-667975.4Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation CVE-2026-667984.3Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.CVE-2026-667997.8Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.CVE-2026-668007.5Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.CVE-2026-668028.1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allow CVE-2026-6680310.0Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.CVE-2026-668047.8Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.CVE-2026-668058.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-668065.5Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-668077.8Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.