{"uuid": "ad01a661-b3d8-4f49-8820-4259ae5b7124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89060", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117250878720400223", "content": "Red Hat Advanced Cluster Management for Kubernetes 2 is affected by CVE-2026-89060 (HIGH, CVSS 7.7): managed-cluster identities may access hub Secrets outside their namespace due to authorization flaws. Monitor Red Hat and restrict permissions. https://radar.offseq.com/threat/cve-2026-89060-incorrect-behavior-order-authorization-before-parsing-and-canonicalization-in-red-hat-70cd9b74c8429f45 #OffSeq #Kubernetes #RedHat", "creation_timestamp": "2026-09-11T06:00:26.566190Z"}