Red Hat Kubernetes SSRF Vulnerability Exposes Internal Managed Cluster Services
Brief
Red Hat has disclosed CVE-2026-66794, an important-severity server-side request forgery vulnerability affecting the cluster-proxy-addon component in Multicluster Engine for Kubernetes.
The flaw, published on August 19, 2026, carries a CVSS v3. 1 score of 9. 3 and could allow unauthenticated remote attackers to access services that would otherwise remain isolated inside connected managed clusters.
Tracked under CWE-918, the issue stems from insufficient authentication and authorization controls on a user-facing cluster-proxy route.
Red Hat Kubernetes SSRF Vulnerability
The vulnerable component is designed to relay traffic between external-facing endpoints and services operating within managed Kubernetes clusters.
However, an attacker who can reach the exposed route may manipulate URL path segments, causing the proxy to forward requests to arbitrary internal services.