A flaw in the console component allows an attacker who can write to container logs on a managed cluster to inject malicious JavaScript into the hub console user's browser session when viewing raw pod logs. This is a stored DOM XSS vulnerability (CWE‑79) that, if successful, can lead to session hijacking, theft of credentials, or execution of unauthorized actions on behalf of the console user.

The vulnerability affects the console component used in managed cluster environments, such as those provided by Red Hat. No specific product name, vendor, or affected version is listed in the CVE data.

The CVSS score of 8.0 indicates a high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, implying that no widespread exploitation has been observed yet. The attack requires the ability to write pod logs, which generally means the attacker must possess privileged access to the cluster or its control plane. Once the console displays raw logs, unescaped content is injected into the page via document.write, providing an attack vector for client‑side code execution.