Multicluster-Global-Hub

A critical authorization vulnerability in the multicloud-operators-subscription component allows low-privileged users to escalate privileges and perform unauthorized resource deployment via crafted Subscription annotations.

A vulnerability in the multicluster-global-hub manager component allows an attacker with a compromised managed hub's Kafka client certificate to impersonate other hubs and manipulate status data.