Read the docs
TI-2026-14230 Aliases CVE-2026-17107GHSA-vr7g-637m-v9mm

Cluster-proxy: impersonation-header injection grants cluster-admin on every managed cluster

Priority MEDIUM 40CWE-441Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00568 47th percentileScored 2026-11-07
Fix Fixed Red Hat: 7 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red Hatmulticluster engine for Kubernetes 2.10—1784342329Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.10—1784342329Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.11—1784925025Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.17—1784926298Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.6—1783985960Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1784342329Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—1783278220Patch availableCNA
  • multicluster engine for Kubernetes 2.10 VendorRed Hat Affected — Fixed in 1784342329 Patch available CNA
  • multicluster engine for Kubernetes 2.10 VendorRed Hat Affected — Fixed in 1784342329 Patch available CNA
  • multicluster engine for Kubernetes 2.11 VendorRed Hat Affected — Fixed in 1784925025 Patch available CNA
  • multicluster engine for Kubernetes 2.17 VendorRed Hat Affected — Fixed in 1784926298 Patch available CNA
  • multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in 1783985960 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1784342329 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in 1783278220 Patch available CNA

CPE names CNA · 6

CPEVersionsRoleVendor
cpe:/a:redhat:multicluster_engine:2.10::el92.10—Red Hat
cpe:/a:redhat:multicluster_engine:2.11::el92.11—Red Hat
cpe:/a:redhat:multicluster_engine:2.17::el92.17—Red Hat
cpe:/a:redhat:multicluster_engine:2.6::el92.6—Red Hat
cpe:/a:redhat:multicluster_engine:2.8::el92.8—Red Hat
cpe:/a:redhat:multicluster_engine:2.9::el92.9—Red Hat
  • cpe:/a:redhat:multicluster_engine:2.10::el9 Versions 2.10 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.11::el9 Versions 2.11 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.17::el9 Versions 2.17 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.6::el9 Versions 2.6 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.8::el9 Versions 2.8 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.9::el9 Versions 2.9 — ·Red Hat

Remediation

Red Hat 7 advisories

  • RHSA-2026:48284 Released 2026-07-29 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.17.1 security update
    • multicluster engine for Kubernetes 2.17 registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/hypershift-rhel9-operator
  • RHSA-2026:47974 Released 2026-07-29 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.11.4 security update
    • multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/hypershift-rhel9-operator
  • RHSA-2026:47953 Released 2026-07-29 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.9.6 security update
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/hypershift-rhel9-operator
Show 4 more Red Hat advisories
  • RHSA-2026:47949 Released 2026-07-29 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.6.13 security update
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +2
  • RHSA-2026:47735 Released 2026-07-29 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.8.9 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9 +5
  • RHSA-2026:47388 Released 2026-07-28 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.10.4 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
  • RHSA-2026:46885 Released 2026-07-27 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.10.4 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat multicluster engine for Kubernetes 2.11, multicluster engine for Kubernetes 2.17 and 3 more products — RHSA-2026:46885

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-13581 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesPriority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat multicluster engine for Kubernetes 2.11, multicluster engine for Kubernetes 2.17 and 3 more products — RHSA-2026:47388

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-13581 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesPriority MEDIUM 50
    Show all 2 records → Advisory →
Show 5 more groups
  • Advisory ·

    Red Hat multicluster engine for Kubernetes 2.11, multicluster engine for Kubernetes 2.17 and 3 more products — RHSA-2026:47735

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-13581 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesPriority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat multicluster engine for Kubernetes 2.11, multicluster engine for Kubernetes 2.17 and 3 more products — RHSA-2026:47949

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-13581 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesPriority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat multicluster engine for Kubernetes 2.11, multicluster engine for Kubernetes 2.17 and 3 more products — RHSA-2026:47953

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-13581 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesPriority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat multicluster engine for Kubernetes 2.11, multicluster engine for Kubernetes 2.17 and 3 more products — RHSA-2026:47974

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-13581 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesPriority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat multicluster engine for Kubernetes 2.11, multicluster engine for Kubernetes 2.17 and 3 more products — RHSA-2026:48284

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-13581 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesPriority MEDIUM 50
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
multicluster engine for Kubernetes 2.10Fixed RHSA-2026:46885
multicluster engine for Kubernetes 2.11Fixed RHSA-2026:47974
multicluster engine for Kubernetes 2.17Fixed RHSA-2026:48284
multicluster engine for Kubernetes 2.6Fixed RHSA-2026:47949
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:47735
multicluster engine for Kubernetes 2.9Fixed RHSA-2026:47953
Not affected: 6 products
  • multicluster engine for Kubernetes 2.10
  • multicluster engine for Kubernetes 2.11
  • multicluster engine for Kubernetes 2.17
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-17107
  2. 2026-10-03 Alias added: GHSA-vr7g-637m-v9mm

References

Advisory 7

Other 2

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences