CVE-2026-10609
Medium
Description
A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrate SA tokens and escalate privileges.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Redhat Cluster Logging Operator
PublishedJun 23, 2026
First seenJun 23, 2026
Weakness typeCWE-862Missing authorization
How to fix
Update
- github.com/openshift/cluster-logging-operator0.0.0-20260804174055-1864c2a9851d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat cluster_logging_operator | No range specified | — |
| redhat logging_subsystem_for_red_hat_openshift | No range specified | — |
| github.com/openshift/cluster-logging-operatorGo | v < 0.0.0-20260804174055-1864c2a9851d, No range specified | 0.0.0-20260804174055-1864c2a9851d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.