Critical

Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

Type: advisorySource: Official CVE List1 source record

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.

Announced 17 Aug 2026Group revision 1

Original source ↗

CVE-2026-66792

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-66792

Multicluster Global Hub 1.4.9

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Multicluster Global Hub 1.4.9

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Multicluster Global Hub 1.4.9

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Multicluster Global Hub 1.5.8

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Multicluster Global Hub 1.5.8

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Multicluster Global Hub 1.5.8

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Multicluster Global Hub 1.6.6

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Multicluster Global Hub 1.6.6

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Multicluster Global Hub 1.6.6

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.11

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.11

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.13

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.13

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.14

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.14

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.15

Source reference: /containers/cna/affected/15/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.15

Source reference: /containers/cna/affected/16/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.16

Source reference: /containers/cna/affected/17/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.16

Source reference: /containers/cna/affected/18/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.17

Source reference: /containers/cna/affected/19/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2.17

Source reference: /containers/cna/affected/20/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2

Source reference: /containers/cna/affected/21/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2

Source reference: /containers/cna/affected/22/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2

Source reference: /containers/cna/affected/23/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2

Source reference: /containers/cna/affected/24/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Management for Kubernetes 2

Source reference: /containers/cna/affected/25/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/26/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/27/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/28/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/29/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/30/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/31/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/32/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/33/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/34/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Openshift Data Foundation 4

Source reference: /containers/cna/affected/35/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Openshift Data Foundation 4

Source reference: /containers/cna/affected/36/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Openshift Data Foundation 4

Source reference: /containers/cna/affected/37/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.4.9",
    "versions": [
      {
        "status": "unaffected",
        "version": "1788355439",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.4.9",
    "versions": [
      {
        "status": "unaffected",
        "version": "1788355599",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.4.9",
    "versions": [
      {
        "status": "unaffected",
        "version": "1788355417",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.5.8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1789515408",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.5.8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1789515288",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.5.8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1789478830",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.6.6",
    "versions": [
      {
        "status": "unaffected",
        "version": "1790085494",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.6.6",
    "versions": [
      {
        "status": "unaffected",
        "version": "1790086176",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
    ],
    "vendor": "Red Hat",
    "product": "Multicluster Global Hub 1.6.6",
    "versions": [
      {
        "status": "unaffected",
        "version": "1790085268",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.11::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787262214",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-application-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.11::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787263584",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.13::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787259284",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-application-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.13::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787263693",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.14::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
    "versions": [
      {
        "status": "unaffected",
        "version": "1786976940",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-application-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.14::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787170830",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.15::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787238598",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-application-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.15::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787240030",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787242135",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-application-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787242321",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787242131",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-application-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787242108",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
    "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
    "packageName": "rhacm2/cert-policy-controller-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
    "packageName": "rhacm2/config-policy-controller-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
    "packageName": "rhacm2/governance-policy-propagator-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:acm:2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
    "packageName": "rhacm2/search-collector-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/cnf-tests-rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/lifecycle-agent-operator-bundle",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/lifecycle-agent-rhel9-operator",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/topology-aware-lifecycle-manager-aztp-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/topology-aware-lifecycle-manager-recovery-rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/topology-aware-lifecycle-manager-recovery-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/topology-aware-lifecycle-manager-rhel8-operator",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/topology-aware-lifecycle-manager-rhel9-operator",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift4/ztp-site-generate-rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_data_foundation:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Openshift Data Foundation 4",
    "packageName": "odf4/odf-cli-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_data_foundation:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Openshift Data Foundation 4",
    "packageName": "odf4/odf-multicluster-rhel9-operator",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_data_foundation:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Openshift Data Foundation 4",
    "packageName": "odf4/odr-rhel9-operator",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  }
]

Related CVEs: CVE-2026-66792
Source reference: /cveMetadata/cveId

Publisher severity

critical

Source reference: /containers/cna/metrics

Event: #3832 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:41:12 GMT
Publisher date: Mon, 17 Aug 2026 18:12:36 GMT

Read the original announcement

Revision history

24 Oct 2026CVE-2026-66792 · Revision 1Source updated