CyberRota Analysis
AI-GeneratedA vulnerability in the governance-policy-addon-controller of Red Hat Advanced Cluster Management for Kubernetes allows users with permission to annotate the ManagedClusterAddOn resource to override the governance-policy container image. This flaw can be exploited to execute arbitrary code with cluster-admin privileges, posing a significant risk of privilege escalation. Organizations using this Kubernetes management solution should prioritize patching to mitigate potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controlled image with cluster-admin privileges on the managed cluster, leading to arbitrary code execution and privilege escalation.