CVE-2026-75569

Name of the Vulnerable Software and Affected Versions mce-operator-bundle (affected versions not specified)

Description The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning (fixing a specific version of a commit) or signature verification. This allows an attacker with write access to the remote repository to inject and execute arbitrary code during the build, which could lead to the distribution of malicious software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.