THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-71577 (MEDIUM 6.3) — A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This allows a compromised managed hub to intercept and collect sensitive bootstrap kubeconfigs, which contain

[NVD] CVE-2026-71577 (MEDIUM 6.3) — A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This allows a compromised managed hub to intercept and collect sensitive bootstrap kubeconfigs, which contain

lownvdPublished 2026-08-10

CVE-2026-71577 CVSS: 6.3 MEDIUM Published: 2026-08-10T17:17:36.197

A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This allows a compromised managed hub to intercept and collect sensitive bootstrap kubeconfigs, which contain API server tokens intended for other hubs. These to

Indicators of compromise

CVE-2026-71577cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-71577