VYPR

Multicluster Observability Addon

by Stolostron

CVEs (1)

  • CVE-2026-89060HigSep 11, 2026
    risk 0.43cvss 7.7epss 0.00

    A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference ClusterLogForwarder or OpenTelemetryCollector resources outside the permitted namespace. If those…