Security Digest — 2026-08-13

Cloud Security

The most urgent item is CVE-2026-50516 in Microsoft Azure Kubernetes Service, a critical-severity flaw (CVSS 9.4) that allows an unauthenticated remote attacker to elevate privileges over a network. While no CISA KEV confirmation is present in the provided data, its combination of critical CVSS score, network reachability, and lack of authentication requirement makes it the top priority for immediate remediation.

Formal Vulnerabilities

Microsoft Azure — CVE-2026-50516 (CVSS 9.4 CRITICAL)

Summary: A missing authentication vulnerability in Microsoft Azure Kubernetes Service allows an unauthenticated remote attacker to elevate privileges over a network. No special configuration or prior access is required to exploit this flaw.

Affected Features / Interoperability: The vulnerability impacts the core authentication mechanism of Azure Kubernetes Service (AKS), potentially affecting cluster management APIs, node communication, and any integrated services relying on AKS for orchestration. Downstream impacts may include unauthorized access to cluster resources, workload manipulation, and compromise of tenant isolation.

Microsoft Azure — CVE-2026-68870 (CVSS 5.3 MEDIUM)

Summary: In Apache Airflow's Microsoft Azure Key Vault secrets backend, a team-scoped lookup failure falls back to a team-agnostic lookup, allowing a caller in one team to retrieve secrets belonging to another team in multi-team deployments. Exploitation requires only standard user access within a misconfigured environment.

Affected Features / Interoperability: Impacts the Azure Key Vault integration in Apache Airflow when operating in multi-team mode. Could lead to cross-tenant secret leakage, credential exposure, and unauthorized access to downstream Azure services relying on those secrets.

Microsoft Azure — CVE-2026-73298 (CVSS UNSCORED)

Summary: An authenticated Insecure Direct Object Reference (IDOR) vulnerability in the Microsoft Container Migration Solution Accelerator allows users to read, write, and delete processes and files belonging to other authenticated users within the same organization. Exploitation requires valid Entra ID credentials but no elevated privileges.

Affected Features / Interoperability: Affects the process and file management APIs of the Container Migration Solution Accelerator. Could result in unauthorized data access, tampering with migration jobs, and potential lateral movement within the organization’s Azure environment.

Kubernetes — CVE-2026-73263 (CVSS 9.9 CRITICAL)

Summary: In Prowler versions prior to 5.36.0, the Kubernetes provider connection test accepts a kubeconfig containing a legacy GCP auth-provider with attacker-controlled `config.cmd-path` and `config.cmd-args`. This leads to arbitrary command execution on the shared worker via `subprocess.Popen`.

Affected Features / Interoperability: Impacts the Kubernetes provider connection testing functionality in Prowler. Could allow attackers to execute arbitrary commands on the Prowler worker, potentially compromising the host system and any connected Kubernetes clusters.

Kubernetes — CVE-2026-50516 (CVSS 9.4 CRITICAL)

Summary: A missing authentication vulnerability in Microsoft Azure Kubernetes Service allows an unauthenticated remote attacker to elevate privileges over a network. This entry overlaps with the Azure-specific listing above.

Affected Features / Interoperability: Same as described under Microsoft Azure.

Kubernetes — CVE-2026-10090 (CVSS 9.0 CRITICAL)

Summary: A privilege escalation flaw in Red Hat Advanced Cluster Management (ACM) allows a user with namespace-scoped "edit" privileges to deploy a Helm chart containing cluster-scoped resources, such as a ClusterRoleBinding granting cluster-admin rights, bypassing intended RBAC restrictions.

Affected Features / Interoperability: Affects the Application Subscription controller in Red Hat ACM. Could lead to full cluster compromise, unauthorized access to cluster resources, and violation of namespace-level isolation policies.

Kubernetes — CVE-2026-18951 (CVSS 8.8 HIGH)

Summary: The Red Hat OpenShift AI (RHOAI) overlay for the training operator incorrectly grants `trainjobs` management permissions to the native Kubernetes `edit` ClusterRole, allowing any user with `edit` permissions to create, modify, or delete TrainJobs. Combined with another vulnerability, this can lead to privilege escalation and arbitrary code execution.

Affected Features / Interoperability: Impacts the RHOAI training operator and associated machine learning workflows. Could allow unauthorized model training job manipulation, data exfiltration, and potential cluster compromise.

Kubernetes — CVE-2026-4740 (CVSS 8.2 HIGH)

Summary: Improper validation of Kubernetes client certificate renewal in Open Cluster Management (OCM) allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller, enabling cross-cluster privilege escalation.

Affected Features / Interoperability: Affects OCM-managed clusters and the hub cluster. Could allow an attacker to gain control over multiple managed clusters and the central hub, undermining the entire fleet management architecture.

Kubernetes — CVE-2026-18381 (CVSS 7.6 HIGH)

Summary: The koku-metrics-operator for Red Hat OpenShift allows a user who can edit the CostManagementMetricsConfig custom resource to specify an arbitrary upload URL. The operator then sends its own service-account bearer token to this URL, enabling token theft.

Affected Features / Interoperability: Impacts cost management and metrics collection in OpenShift. Could lead to unauthorized access to cluster metrics, billing data, and potential lateral movement using stolen tokens.

Kubernetes — CVE-2026-18942 (CVSS 5.5 MEDIUM)

Summary: A flaw in the Feast operator allows a malicious tenant to inject arbitrary code into their feature repository, which is executed with elevated privileges by an automated process, potentially leading to credential theft and cluster compromise.

Affected Features / Interoperability: Affects Feast-based feature stores in Kubernetes environments. Could result in unauthorized access to sensitive data, model poisoning, and privilege escalation within the cluster.

Kubernetes — CVE-2026-20770 (CVSS UNSCORED)

Summary: A protection mechanism failure in the Cluster Management Toolkit for Kubernetes (Ring 3) may allow privilege escalation under specific conditions involving local access and user interaction.

Affected Features / Interoperability: Impacts the Cluster Management Toolkit component. Potential effects on system confidentiality, integrity, and availability, though exact scope is unclear due to limited scoring.

Kubernetes — CVE-2026-73298 (CVSS UNSCORED)

Summary: An authenticated IDOR vulnerability in the Microsoft Container Migration Solution Accelerator allows users to access, modify, and delete processes and files belonging to other users within the same organization.

Affected Features / Interoperability: Same as described under Microsoft Azure.

Kubernetes — CVE-2026-73500 (CVSS UNSCORED)

Summary: A denial-of-service vulnerability in etcd allows a network attacker who can reach an etcd TLS listener to exhaust memory by opening many TCP connections without sending a ClientHello, leading to cluster unavailability.

Affected Features / Interoperability: Affects etcd, the distributed key-value store used by Kubernetes. Could cause loss of availability for the Kubernetes control plane and all dependent services.

Security Digest — 2026-08-13

feeds.feedburner.com

krebsonsecurity.com

www.bleepingcomputer.com

www.reddit.com