CVE-2026-70496

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Aug 19, 2026
Source updated: Sep 5, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork

A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control (RBAC) configurations, approve Certificate Signing Requests (CSRs), and manage ManifestWork. This grants excessive privileges beyond what is necessary for the operator's intended function, potentially leading to privilege escalation within the cluster.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Red Hat Advanced Cluster Management for Kubernetes 2.11

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2.11
Platforms: Unknown
Default status: affected
Package: rhacm2/acm-search-v2-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Advanced Cluster Management for Kubernetes 2.11 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787688827	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Advanced Cluster Management for Kubernetes 2.13

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13
Platforms: Unknown
Default status: affected
Package: rhacm2/acm-search-v2-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Advanced Cluster Management for Kubernetes 2.13 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787682112	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Advanced Cluster Management for Kubernetes 2.14

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2.14
Platforms: Unknown
Default status: affected
Package: rhacm2/acm-search-v2-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Advanced Cluster Management for Kubernetes 2.14 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787682033	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Advanced Cluster Management for Kubernetes 2.15

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2.15
Platforms: Unknown
Default status: affected
Package: rhacm2/acm-search-v2-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Advanced Cluster Management for Kubernetes 2.15 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787681674	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Advanced Cluster Management for Kubernetes 2.16

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2.16
Platforms: Unknown
Default status: affected
Package: rhacm2/acm-search-v2-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Advanced Cluster Management for Kubernetes 2.16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787681686	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Advanced Cluster Management for Kubernetes 2.17

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2.17
Platforms: Unknown
Default status: affected
Package: rhacm2/acm-search-v2-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Advanced Cluster Management for Kubernetes 2.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787681651	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Advanced Cluster Management for Kubernetes 2.17

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2.17
Platforms: Unknown
Default status: affected
Package: rhacm2/search-collector-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Advanced Cluster Management for Kubernetes 2.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787229539	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Advanced Cluster Management for Kubernetes 2

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2
Platforms: Unknown
Default status: unaffected
Package: rhacm2/multiclusterhub-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.