Attack Chain

1. Initial Access: An attacker gains authenticated access as a hub principal to the Red Hat Advanced Cluster Management or Multicluster Engine platform.
2. Vulnerability Identification: The authenticated attacker identifies the cluster-proxy service-proxy component as vulnerable, specifically its failure to validate or remove caller-supplied Impersonate-Group headers.
3. Request Crafting: The attacker crafts a malicious proxied request intended for a managed cluster, embedding a forged Impersonate-Group: system:masters header within it.
4. Header Injection: The crafted request, containing the malicious header, is sent to the cluster-proxy service-proxy component.
5. Lack of Validation: The service-proxy processes the request and, due to the identified flaw, appends the attacker-supplied Impersonate-Group header without proper validation or prior removal of existing values.
6. Privilege Escalation via Spoke ServiceAccount: The proxied request, now containing the injected system:masters group, reaches the target managed cluster. The spoke ServiceAccount, which possesses unrestricted impersonation permissions, processes this request with cluster-admin privileges.
7. Administrative Control: The attacker successfully escalates privileges and gains cluster-admin access on the managed cluster, enabling full control over all Kubernetes resources and configurations within that cluster.

Impact

Successful exploitation of CVE-2026-17107 allows an authenticated attacker to gain cluster-admin privileges on all managed clusters within the Red Hat Advanced Cluster Management or Multicluster Engine environment. This grants full administrative control, potentially leading to complete compromise of the clusters, including data exfiltration, service disruption, deployment of malicious workloads, or further lateral movement within the compromised infrastructure. Given the critical role of cluster-admin privileges, this vulnerability could severely impact the confidentiality, integrity, and availability of the affected Kubernetes environments.

Recommendation

• Patch CVE-2026-17107 by updating Red Hat Advanced Cluster Management for Kubernetes and multicluster-engine to the versions specified in the vendor advisory from Red Hat.
• Monitor platform logs for the cluster-proxy service-proxy component for any unusual Impersonate-Group headers in proxied requests, particularly those not originating from known legitimate internal services.
• Review and restrict ServiceAccount permissions within your Kubernetes environment to follow the principle of least privilege, especially for ServiceAccounts involved in proxying or impersonation, to limit the blast radius of similar vulnerabilities.