CVE-2026-10609

MEDIUM

Openshift/cluster-logging-operator: cluster logging operator creates and forwards serviceaccount tokens without verifying clf creator authorization

Title source: cna

Description

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrate SA tokens and escalate privileges.

References (2)

Core 2

Core References

Vdb Entry, X_Refsource_Redhat vdb-entry x_refsource_redhat

https://access.redhat.com/security/cve/CVE-2026-10609

Issue Tracking, X_Refsource_Redhat issue-tracking x_refsource_redhat

RHBZ#2483943

https://bugzilla.redhat.com/show_bug.cgi?id=2483943

Scores

CVSS v3 6.8

EPSS 0.0023

EPSS Percentile 13.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-862

Status published

Products (3)

Red Hat/Logging Subsystem for Red Hat OpenShift

redhat/cluster_logging_operator

redhat/logging_subsystem_for_red_hat_openshift

Published Jun 23, 2026

Tracked Since Jun 23, 2026