{"vulnerability": "CVE-2026-89060", "sightings": [{"uuid": "ad01a661-b3d8-4f49-8820-4259ae5b7124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89060", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117250878720400223", "content": "Red Hat Advanced Cluster Management for Kubernetes 2 is affected by CVE-2026-89060 (HIGH, CVSS 7.7): managed-cluster identities may access hub Secrets outside their namespace due to authorization flaws. Monitor Red Hat and restrict permissions. https://radar.offseq.com/threat/cve-2026-89060-incorrect-behavior-order-authorization-before-parsing-and-canonicalization-in-red-hat-70cd9b74c8429f45 #OffSeq #Kubernetes #RedHat", "creation_timestamp": "2026-09-11T06:00:26.566190Z"}, {"uuid": "0b202561-26c1-4028-ab2b-2171c24b13ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89060", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv7vakxinq24", "content": "HIGH severity (CVSS 7.7): Red Hat Advanced Cluster Management for Kubernetes 2 allows cross-namespace Secret access due to flawed authorization order (CVE-2026-89060). Check https://radar.offseq.com/threat/cve-2026-89060-incorrect-behavior-order-authorization-before-parsing-and-canonicalization-i...", "creation_timestamp": "2026-09-11T06:00:28.398851Z"}, {"uuid": "113d1d6e-45e7-4427-8d2c-9c9331946c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89060", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvagrmdts52e", "content": "multicluster-observability-addon\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u7ba1\u7406\u5bfe\u8c61\u30af\u30e9\u30b9\u30bf\u306eID\u304c\u540d\u524d\u7a7a\u9593\u5916\u306e\u8a2d\u5b9a\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u53ef\u80fd\u306b\u306a\u308a\u3001\u6a5f\u5bc6\u60c5\u5831\uff08Hub Secrets\uff09\u304c\u653b\u6483\u8005\u5236\u5fa1\u306e\u30af\u30e9\u2026\nCVE-2026-89060 CVSS 7.7 | HIGH", "creation_timestamp": "2026-09-11T11:14:15.151947Z"}]}