CVE-2026-66792: Red Hat multicloud-operators-subscription Kubernetes cluster-admin Privilege Escalation, CVSS 9.9

Red Hat Advanced Cluster Management and Multicluster Global Hub component multicloud-operators-subscription discloses CVE-2026-66792, CVSS 9.9. Authenticated users on managed clusters escalate to cluster-admin via crafted Subscription annotations and can deploy arbitrary resources across the multi-cluster environment. Public exploit in circulation. NCSC-FI emergency advisory.

Red Hat disclosed a critical privilege-escalation vulnerability in its multicloud management product family this Monday: CVE-2026-66792, CVSS 9.9 (Critical). It affects the multicloud-operators-subscription component, Red Hat Advanced Cluster Management (ACM), and Multicluster Global Hub. The flaw is in how the component evaluates the `isclusteradmin()` trust model against Subscription annotations: any authenticated user on a managed cluster can create a Subscription with specific annotations, escalate to the cluster-admin role, and deploy arbitrary Kubernetes resources across the multi-cluster environment. Exploit code is public. Finland's National Cyber Security Centre (NCSC-FI) issued an emergency advisory and recommends all multi-tenant SaaS and shared multi-cluster federation deployments assess exposure immediately.

Incident Overview

Red Hat Advanced Cluster Management is the core control plane for enterprise Kubernetes multi-cluster management. Hub-Spoke topologies that connect downstream managed clusters are widely used by finance, telecom, and government customers, carrying unified policy, observability, and Operator orchestration across tens to hundreds of clusters. CVE-2026-66792 means a compromised low-privilege developer account on one spoke cluster can escalate, layer by layer, to hub cluster-admin, then obtain write access to namespaces, CRDs, and Operators on all managed clusters, bypassing any security assumptions based on namespace isolation or RBAC limits.

Technical Details

• CVSS: 9.9 (Critical). Attack vector Network, complexity Low, privileges required Low, user interaction None, scope Changed.
• Trigger component: multicloud-operators-subscription (ACM / Multicluster Global Hub subcomponent; syncs Subscription resources to target clusters).
• Vulnerability logic: when a synced Subscription annotation matches a specific prefix, the `isclusteradmin()` trust model incorrectly treats an ordinary user identity on the spoke as cluster-admin on the hub and grants the corresponding privileges.
• Impact: write arbitrary namespaced resources, create privileged Pods, load malicious Operators, persist implants into hub / spoke etcd.
• Exploit bar: authenticated access to a managed cluster only. No privileged credentials. No user interaction. Public PoC assembles the chain quickly. Defender window is short.

Impact Assessment

For finance, telecom, and government customers running Red Hat ACM / Multicluster Global Hub, CVE-2026-66792 is a blast-radius issue: one spoke compromise equals compromise of the entire multi-cluster fabric, because cluster-admin cross-cluster access spreads along the Subscription replication path to every namespace the hub has synced. Once an attacker lands an Operator on the hub, they can force-rollout workloads with malicious images on all spoke clusters and pivot laterally. With public PoC spreading fast, NCSC-FI placed this CVE on its emergency patch list—one magnitude above its usual CVSS 7.x / 8.x band—and treats every spoke as a potential entry for lateral movement.

Remediation

• Upgrade the multicloud-operators-subscription component immediately per the Red Hat security advisory. Upgrade ACM / Multicluster Global Hub together to the matching patched branch if required.
• On the hub, attach an admission webhook to all Subscription resources. Reject objects synced from spokes that carry non-standard annotations (custom prefixes, special labels).
• Review managed-cluster RBAC. Bind ordinary developer accounts to least-privilege roles by default. Grant cluster-admin / cluster-edit only to ops accounts, with MFA enforced.
• Enable kube-apiserver audit logs. Add SIEM rules for bursts of Subscription / ClusterRoleBinding / RoleBinding creation.
• Whitelist Operator / CatalogSource / ClusterRole versions on the hub. Isolate any unconventional source (unauthorized image registries).

References

• Red Hat Security CVE-2026-66792 Advisory
• Enigma Global Daily Threat Intelligence Digest August 18
• NCSC-FI Red Hat Multicluster Global Hub advisory
• Daily Cybersecurity Intelligence August 18, 2026