CVE-2026-73834

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulting archive, potentially exposing sensitive information to anyone with access to the archive.

Score
CVSS 3.1 5.5 Medium
Status
Awaiting Analysis - secalert@redhat.com
Published
2026-08-18
Last modified
2026-09-05
Weaknesses
CWE-312

Affected products

References

 
 
© AVABIS GmbH privacypolicy about