Red Hat Multicluster Engine Confused Deputy Vulnerability

A security flaw (CVE-2026-73266) exists within the clusterclaims-controller component of Red Hat Multicluster Engine (MCE) for Kubernetes. This vulnerability, categorized as a 'Confused Deputy' (CWE-441), allows an authenticated tenant within a multi-tenant environment to manipulate ClusterClaim labels. By improperly influencing the controller's logic, an attacker can force a cluster to join a ManagedClusterSet belonging to a different tenant. This unauthorized association breaks tenant isolation boundaries, providing the attacker the ability to push malicious policies or workloads into another tenant's environment. The vulnerability has a CVSS 3.1 score of 7.1, highlighting the potential for significant cross-tenant privilege escalation and impact on cluster integrity.

Attack Chain

1. Attacker authenticates as a legitimate, lower-privileged tenant within the shared Multicluster Engine environment.
2. Attacker interacts with the Kubernetes API to modify ClusterClaim resource objects.
3. Attacker injects or updates specific ClusterClaim labels designed to target a victim ManagedClusterSet.
4. The vulnerable clusterclaims-controller observes the modified labels.
5. Due to insufficient validation, the controller incorrectly associates the attacker-controlled cluster with the victim's ManagedClusterSet.
6. The attacker leverages the cross-tenant membership to perform administrative actions.
7. Attacker executes API calls to push unauthorized policies or malicious container workloads into the victim's cluster.

Impact

Successful exploitation results in a complete breach of multi-tenant isolation. Attackers can gain control over clusters they do not own, leading to unauthorized workload deployment, policy manipulation, and potential exfiltration of sensitive data residing in the victim's managed cluster environment.

Recommendation

Prioritized, concrete actions for security operations and platform teams:

• Apply the latest security patches for the Multicluster Engine for Kubernetes provided by Red Hat to resolve CVE-2026-73266.
• Audit Kubernetes API audit logs for unusual modification patterns involving ClusterClaim resources where the user context does not match the target ClusterSet namespace.
• Implement restrictive Kubernetes Admission Controllers (e.g., OPA Gatekeeper or Kyverno) to enforce strict validation of label sets on ClusterClaim resources, preventing users from modifying critical system labels.
• Review RBAC policies to ensure that tenants are restricted from modifying ClusterClaim labels that influence cluster-level scheduling or grouping.