Furthermore, the controller applies these resources with elevated internal service account privileges and fails to restrict the scope of the deployed resources to the subscription namespace. An attacker with standard namespace-scoped 'edit' permissions can craft a malicious Helm chart containing cluster-scoped resources, such as ClusterRoleBindings. When the controller processes the subscription, it installs these resources cluster-wide, enabling the attacker to grant their own ServiceAccount elevated 'cluster-admin' privileges. This bypasses the security boundaries established by the ACM architecture.

Impact

Successful exploitation of this vulnerability results in full cluster-admin privilege escalation on the affected Kubernetes cluster. This allows an unauthorized user to gain control over the entire cluster, potentially leading to unauthorized access to sensitive data, modification of cluster resources, and disruption of services across all namespaces. This vulnerability affects all versions of Red Hat Advanced Cluster Management where the multicluster-operators-subscription controller is deployed.

Recommendation

• Audit existing Subscription and Channel resources for unauthorized Helm repository sources or suspicious cluster-scoped resource definitions.
• Implement strict RBAC policies that limit the ability of users to create Subscription and Channel resources within ACM hub namespaces.
• Apply the latest security updates provided by Red Hat to patch the multicluster-operators-subscription controller for CVE-2026-10090.
• Monitor Kubernetes API audit logs for 'create' or 'update' operations on Subscription and Channel resources originating from non-admin accounts.