CVE-2026-10843

Name of the Vulnerable Software and Affected Versions OpenShift Cloud Credential Operator (affected versions not specified)

Description A flaw exists in the Mint-mode IAM policies for AWS within the OpenShift Cloud Credential Operator. Operator credentials are provisioned with account-wide scope for destructive actions instead of being restricted to cluster-owned resources. This configuration allows for cross-scope impact if credentials are compromised.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.