Product
The multicluster-global-hub-operator-bundle is configured with overly broad RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts.