THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-17107 (HIGH 8.5) — A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values,

[NVD] CVE-2026-17107 (HIGH 8.5) — A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values,

mednvdPublished 2026-07-24

CVE-2026-17107 CVSS: 8.5 HIGH Published: 2026-07-24T19:16:55.907

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted imper

MITRE ATT&CK techniques

ImpersonationT1684.001
ImpersonationAML.T0073

Indicators of compromise

CVE-2026-17107cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-17107