CVE-2026-64927

Name of the Vulnerable Software and Affected Versions multicloud-operators-channel (affected versions not specified)

Description A flaw in the multicloud-operators-channel component allows a user with specific permissions to manipulate the handling of Secrets across different namespaces. This issue, characterized as a confused deputy problem, occurs via the spec.secretref.namespace variable, enabling an attacker to modify Secrets in unauthorized areas. This could result in unauthorized information access or elevated system privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.