CVE-2026-89060Disclosure

LOWCVSS 7.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference ClusterLogForwarder or OpenTelemetryCollector resources outside the permitted namespace. If those resources reference Secrets, the add-on may copy the referenced Secrets to the attacker-controlled managed cluster.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-551

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-09-11); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-89060

Full discourse2 posts

DFIR Lab@DFIR_Lab41d
Disclosure
🚨 HIGH: CVE-2026-89060 (CVSS 7.7) - Cross-namespace authorization flaw in multicluster-observability-addon allows unauthorized Secret access across managed clusters. Attackers with ManagedClusterAddOn perms can exfiltrate Secrets. #CVE #Vulnerability #PatchNow https://t.co/glYyn21E2G
Post summary
The tweet announces CVE-2026-89060 with technical details (cross-namespace authorization flaw, CVSS 7.7) but contains no named patch, exploit code, or active exploitation claims, fitting the Disclosure classification.
0000029
138 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-89060 A flaw was found in multicluster-observability-addon. This vulnerability allows a managed-cluster identity to reference configuration resources outside its designated… https://www.cve.org/CVERecord?id=CVE-2026-89060
Post summary
A newly disclosed flaw in multicluster‑observability‑addon lets a managed‑cluster identity reference configuration resources outside its intended scope.
00000712
58.1K followersView on X

Explore more

Back to dashboard