CVE-2026-71471

Name of the Vulnerable Software and Affected Versions acm-search-v2-rhel9 (affected versions not specified)

Description An attacker with administrative privileges on the hub cluster, specifically those with patch access to the Search Custom Resource (CR), can exploit a flaw in the Collector.ImageOverride field. This allows the deployment of an arbitrary container image across all managed clusters, leading to remote code execution (RCE), which enables the execution of commands and potential access to sensitive information across the entire fleet of managed clusters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.