A critical vulnerability in Red Hat Advanced Cluster Management for Kubernetes 2 permits unauthorized network traffic redirection between clusters, leading to potential information disclosure.

This is an improper input validation vulnerability (CWE-20) within Submariner. A low-privileged attacker (PR:L) controlling a spoke cluster can announce arbitrary network ranges, causing traffic from other clusters to be routed through an attacker-controlled tunnel.

Exploitation allows for man-in-the-middle attacks on cross-cluster traffic, which can result in the interception of sensitive data or the disruption of critical network services. With a CVSS score of 9.9, this vulnerability threatens the fundamental security of multi-cluster networking, potentially leading to unauthorized information disclosure and loss of communication integrity.

Immediate Action: Update Red Hat Advanced Cluster Management for Kubernetes 2 to the latest version to address the Submariner validation flaw.

Proactive Monitoring: Monitor network flow logs and Submariner endpoint configurations for unauthorized subnet announcements or unusual routing patterns.

Compensating Controls: Restrict cross-cluster communication to essential services only and implement encryption at the application layer to mitigate the impact of traffic interception.

Public Exploit Available: Unknown

Organizations utilizing Submariner for cross-cluster connectivity must treat this update as high priority. Administrators should audit the current cluster network topology and ensure that all cluster-to-cluster communication is strictly validated and monitored for anomalies.