{"id":"CVE-2026-107176","title":"A flaw was found in the cluster-samples-operator","summary":"A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requ…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-250"],"vendor":"Red Hat","product":"openshift4/ose-cluster-samples-operator","affected":["openshift4/ose-cluster-samples-operator (all versions)","openshift4/ose-cluster-samples-rhel9-operator (all versions)"],"published":"2026-10-07","updated":"2026-10-07","sourceUpdated":"2026-10-07T21:17:13.860","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-107176","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-107176","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523035","label":"secalert@redhat.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-07T19:59:03.424144Z"},"ingestedAt":"2026-10-07T20:46:46.978Z","slug":"CVE-2026-107176","body":"## Overview\n\nA flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operator pod or its service account token is compromised through a separate vulnerability, an attacker could read all secrets in openshift-config, potentially including OAuth identity provider credentials, cloud provider credentials, and other sensitive cluster configuration.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}