Product
A privilege escalation vulnerability in the managedcluster-import-controller allows a compromised spoke cluster service account to escalate privileges on the hub cluster by submitting malformed Certificate Signing Requests.