cloud-service-vulnerabilityprivilege-escalation-methodwidely-deployed-product-advisoryidentity-authentication-vulnerability

Critical RHACM Flaw Lets Hub Tenants Push Malicious Manifests to Spoke Clusters

Vulnerability Disclosure · 3 sources · Updated 3mo ago · First seen Aug 12, 2026

Red Hat disclosed CVE-2026-72526, a critical vulnerability in the multicloud-integrations component of Red Hat Advanced Cluster Management for Kubernetes 2. The flaw is caused by improper validation of the ocm-managed-cluster annotation in an Application custom resource handled by the Application propagation controller. Red Hat scored the issue CVSS 9.9 and classified it as CWE-441, a confused deputy-style authorization bypass.

An authenticated tenant with permission to create Application resources on the hub cluster can exploit the bug to target arbitrary managed spoke clusters, causing ArgoCD on those clusters to synchronize attacker-controlled manifests. Red Hat said successful exploitation could lead to arbitrary code execution or privilege escalation up to cluster-admin on connected spoke clusters. The affected package is listed as rhacm2/multicloud-integrations-rhel9, and Red Hat said no acceptable mitigation is currently available.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

3 events · Aug 11, 2026 – Aug 12, 2026

Aug 12, 20263mo ago
Red Hat updates the CVE-2026-72526 entry
Red Hat last modified its CVE-2026-72526 entry, continuing to list the product as affected and stating that no acceptable mitigation was available. The entry links the issue to Bugzilla 2514227.
CVE-2026-72526 - Red Hat Customer Portal
Aug 12, 20263mo ago
Red Hat receives CVE-2026-72526
Red Hat received CVE-2026-72526 via secalert@redhat.com. The vulnerability affects the rhacm2/multicloud-integrations-rhel9 package in Red Hat Advanced Cluster Management for Kubernetes 2.
CVE-2026-72526 - Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation
Aug 11, 20263mo ago
Red Hat publishes CVE-2026-72526 disclosure
Red Hat published CVE-2026-72526 for Red Hat Advanced Cluster Management for Kubernetes 2, describing a critical authorization-bypass flaw in multicloud-integrations caused by improper validation of the ocm-managed-cluster annotation. The issue can let a tenant with Application creation rights on the hub cluster target arbitrary spoke clusters and potentially achieve code execution or privilege escalation up to cluster-admin.
CVE-2026-72526 - Red Hat Customer Portal

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

1 linked

Arbitrary Managed-Cluster Targeting in Red Hat ACM multicloud-integrations (CVE-2026-72526)

Affected products

1 linked

Multicloud-Integrations

Organizations

1 linked

Red Hat

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

3 references tracked. Mallory keeps watching after this page renders.

Cvefeed High SeverityAdvisories · Aug 12, 2026

CVE-2026-72526 - Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotationOpen source ↗

Redhat AccessNews · Aug 12, 2026

CVE-2026-72526 - Red Hat Customer PortalOpen source ↗

Bugzilla RedhatNews

Bug Access DeniedOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Critical RHACM Flaw Lets Hub Tenants Push Malicious Manifests to Spoke Clusters

How this story unfolded

Red Hat updates the CVE-2026-72526 entry

Red Hat receives CVE-2026-72526

Red Hat publishes CVE-2026-72526 disclosure

Related entities

Vulnerabilities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Privilege Escalation in Red Hat ACM Lets Namespace Editors Become Cluster Admin

Critical Privilege Escalation in OpenShift Multicluster Engine cluster-curator-controller

Critical Privilege Escalation in Red Hat Multicluster Engine Cluster Curator

Critical RHACM Flaw Lets Hub Tenants Push Malicious Manifests to Spoke Clusters

How this story unfolded

Red Hat updates the CVE-2026-72526 entry

Red Hat receives CVE-2026-72526

Red Hat publishes CVE-2026-72526 disclosure

Related entities

Vulnerabilities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Privilege Escalation in Red Hat ACM Lets Namespace Editors Become Cluster Admin

Critical Privilege Escalation in OpenShift Multicluster Engine cluster-curator-controller

Critical Privilege Escalation in Red Hat Multicluster Engine Cluster Curator