CVE-2026-66792 Red Hat CVE debrief

Who should care

Defenders managing Red Hat Advanced Cluster Management for Kubernetes 2.11 should verify exposure and assess potential impact. This includes reviewing the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Additionally, defenders should plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact on managed clusters due to a critical vulnerability in Red Hat Advanced Cluster Management for Kubernetes 2.11.

• Potential unauthorized access to cluster resources
• Possible elevation of privileges on managed clusters
• Need for verification of exposure and impact

Technical summary

The multicloud-operators-subscription component vulnerability allows a user to escalate privileges by creating a Subscription with specific annotations, potentially leading to unauthorized access and control over cluster resources. This vulnerability affects Red Hat Advanced Cluster Management for Kubernetes 2.11 and has a CVSS score of 9.9, indicating a critical severity level. The vulnerability can be exploited by creating a Subscription with specific, crafted annotations, allowing an attacker to deploy resources into any namespace with elevated permissions.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact on managed clusters.

Recommended defensive actions

• Verify exposure of managed clusters to this vulnerability
• Assess potential impact on cluster resources
• Apply patches or mitigations provided by Red Hat
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

Evidence from the CVE Program and NVD indicates a critical vulnerability in Red Hat Advanced Cluster Management for Kubernetes 2.11, allowing privilege escalation. The CVE record was published on 2026-08-17T19:16:34.237Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. Defenders should verify exposure and assess potential impact on managed clusters.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.