CVE-2026-73266

Name of the Vulnerable Software and Affected Versions Multicluster Engine (affected versions not specified)

Description A flaw in the clusterclaims-controller component allows an authenticated tenant to manipulate ClusterClaim labels. This manipulation enables a tenant to force a cluster to join a ManagedClusterSet belonging to another tenant, potentially leading to the unauthorized injection of policies and workloads into clusters owned by other tenants.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.