High severity8.8NVD Advisory· Published Apr 30, 2026· Updated May 5, 2026
CVE-2026-6389
CVE-2026-6389
Description
IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials, escalate privileges, and potentially achieve full cluster compromise.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:ibm:turbonomic_prometurbo_agent:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:turbonomic_prometurbo_agent:*:*:*:*:*:*:*:*range: >=8.16.0,<8.18.0
- (no CPE)range: 8.16.0 through 8.17.6
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7270720nvdVendor Advisory
News mentions
0No linked articles in our index yet.