CVE record · 1 source
CVE-2026-93017
CVSS 7.7The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or…
- Vendor
- Red Hat, GitHub
- Product
- openshift, github
- CVSS
- 7.7
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or…
The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace…