CVE-2026-4740

Name of the Vulnerable Software and Affected Versions Open Cluster Management (OCM) (affected versions not specified)

Description Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This flaw enables cross-cluster privilege escalation, potentially allowing an attacker to gain control over other managed clusters, including the hub cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.