CVE-2026-10101

Name of the Vulnerable Software and Affected Versions ACM/MCE assisted-service (affected versions not specified)

Description The assisted-service writes raw referenced pull-secret contents into the InfraEnv.status.conditions[].message field when pull-secret validation fails. This allows a namespace principal with the view ClusterRole to recover .dockerconfigjson data, including username, password, email, and base64 auth fields, by reading InfraEnv objects. This behavior bypasses the Kubernetes/OpenShift Role-Based Access Control (RBAC) separation between read-only namespace viewers and Secret readers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.