CVE-2026-75924

Name of the Vulnerable Software and Affected Versions managed-serviceaccount (affected versions not specified)

Description A flaw exists where an addon-manager pod, granted excessive permissions via its ClusterRole, can be compromised to read any secret across all namespaces. Furthermore, the pod can approve arbitrary Certificate Signing Requests (CSRs), which are requests for a digital certificate to verify identity, potentially leading to information disclosure and privilege escalation within the cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.