https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:48:49.061911+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-9779 CVE-2024-9779 — Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens 2026-10-06T21:48:49.085419+00:00

Affected: open-cluster-management-io, Red Hat Advanced Cluster Management for Kubernetes 2

A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named "cluster-manager", which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager's token and steal any service account token by creating and mounting the target service account to control the whole cluster.