CyberSec Daily ✓ · ☁️ Kubernetes Security · 12–13 August 2026 🎯 Second Red Hat flaw can turn namespace access into cluster-wide control Red Hat has disclosed another critical Multicluster Engine vulnerability, CVE-2026-73269, also rated CVSS 9.9. The flaw can allow a tenant with namespace-local access to trigger creation of an overly privileged cluster-wide role binding. Successful exploitation could give the attacker broad control, including access to secrets and administrative operations across managed clusters. Red Hat recommends tightly restricting which tenants can create the affected ClusterCurator resources. 🔗 Source: Red Hat Product Security #Kubernetes #OpenShift #RedHat #IAM #CloudSecurity
Post summary
Red Hat disclosed CVE-2026-73269, a critical Multicluster Engine flaw that lets namespace‑limited users create over‑privileged cluster role bindings, potentially enabling wide control over clusters. The vendor recommends restricting tenant permissions as a mitigation step.