High severity8.8NVD Advisory· Published Aug 18, 2026· Updated Aug 27, 2026
CVE-2026-66793
CVE-2026-66793
Description
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controlled image with cluster-admin privileges on the managed cluster, leading to arbitrary code execution and privilege escalation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
8- access.redhat.com/errata/RHSA-2026:60386nvd
- access.redhat.com/errata/RHSA-2026:60387nvd
- access.redhat.com/errata/RHSA-2026:60388nvd
- access.redhat.com/errata/RHSA-2026:60389nvd
- access.redhat.com/errata/RHSA-2026:60390nvd
- access.redhat.com/errata/RHSA-2026:60391nvd
- access.redhat.com/security/cve/CVE-2026-66793nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.