THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-73269 (CRITICAL 9.9) — A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-l

[NVD] CVE-2026-73269 (CRITICAL 9.9) — A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-l

mednvdPublished 2026-08-12

CVE-2026-73269 CVSS: 9.9 CRITICAL Published: 2026-08-12T20:17:53.793

A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-local access to cluster-wide control. This privileg

Indicators of compromise

CVE-2026-73269cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73269