The vulnerability resides in the managed-serviceaccount component used by the addon‑manager. A compromised addon‑manager pod can exploit an overly permissive ClusterRole, allowing it to read any secret in every namespace and to approve arbitrary Certificate Signing Requests. This grants attackers the ability to retrieve sensitive configuration data, credentials, and to elevate privileges within the cluster, potentially leading to full cluster compromise.

Red Hat Advanced Cluster Management for Kubernetes version 2 is affected. The flaw is present in the component that grants the addon‑manager ClusterRole, which is applied across the entire Kubernetes cluster managed by this product.

The vulnerability carries a CVSS score of 8.7, indicating high severity. EPSS data is not available, so the current probability of exploitation cannot be quantified, but the lack of a public fix and the cluster‑wide impact increase urgency. The CVE is not listed in the CISA KEV catalog, yet the ability to read all secrets and approve CSRs presents a critical threat that can be leveraged for privilege escalation and data exfiltration if an attacker gains access to the addon‑manager pod.