CVE-2026-70495
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve `system:masters` access, granting them full control over the cluster.
Risk Assessment
The risk is critical because compromising the service account could lead to full cluster compromise, including access to all resources and data. However, it requires prior access to a pod.
Recommendation
It is recommended to immediately restrict the permissions of the `search-serviceaccount` following the principle of least privilege. Also, monitor access to pods and audit permissions.
Original NVD description (English source)
A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve `system:masters` access, granting them full control over the cluster.