CVE-2026-64927
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the system handles sensitive information (Secrets) across different namespaces. By exploiting this, an attacker can modify these Secrets in unauthorized areas, potentially leading to unauthorized access or elevated privileges.
Risk Assessment
The vulnerability may allow unauthorized access to sensitive data or privilege escalation, posing a serious security threat.
Recommendation
It is recommended to restrict user permissions and monitor access to Secrets. Apply available security patches as well.
Original NVD description (English source)
A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the system handles sensitive information, known as Secrets, across different parts of the system (namespaces). By exploiting this, an attacker can modify these Secrets in unauthorized areas. This could lead to unauthorized access to information or elevated privileges within the system.