Cluster-backup-operator is vulnerable to command injection via malicious hooks defined in a Restore Custom Resource. An attacker with namespace administrator privileges can embed arbitrary commands in the hooks. When a restore operation is performed, these hooks are injected verbatim into Velero Restore, causing them to execute inside any matching restored pod. This bypasses normal RBAC controls, allowing the attacker to run arbitrary code and exfiltrate information such as ServiceAccount JWT tokens. The vulnerability represents a classic command injection flaw (CWE‑77) and can lead to compromise of the affected cluster if the attacker gains control of pod execution and service accounts.

Affected product information is limited. The report indicates that the cluster-backup-operator component of the Open Cluster Management Backup solution is impacted. No specific vendor or product version identifiers are provided; the vulnerability appears to affect any deployment of cluster-backup-operator where namespace administrators can create Restore CRs with arbitrary hooks. Version details are unknown from the available data.

CVSS score of 8.8 indicates a high severity. EPSS data is unavailable, so the current exploitation likelihood cannot be quantified. The vulnerability is not listed in CISA’s KEV catalog. Attack requires an attacker to be a namespace administrator with the ability to create a Restore CR; once the CR is applied the hooks are executed in all pods that match the restore selector. The impact is arbitrary code execution and theft of service account credentials, potentially giving full cluster control to the attacker. Immediate assessment of whether the organization’s cluster-backup-operator instances are exposed to this risk is recommended.