CVE-2026-75485

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes (affected versions not specified)

Description A flaw in the must-gather component allows the cluster Proxy object to be dumped in raw form. This process bypasses the oc inspect redaction mechanism that typically sanitizes sensitive fields, resulting in the exposure of proxy basic-auth credentials within the must-gather archive. This could lead to the disclosure of sensitive authentication information to individuals with access to the archive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.