CVE-2025-2843

Name of the Vulnerable Software and Affected Versions Observability Operator (affected versions not specified)

Description Incorrect privilege assignment occurs when the operator creates a ServiceAccount with ClusterRole privileges during the deployment of the namespace-scoped Custom Resource MonitorStack. This allows a Kubernetes account with only namespace-level roles to create a MonitorStack within an authorized namespace and elevate permissions to the cluster level by impersonating the created ServiceAccount, leading to privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.