Cluster Logging Operator

cluster_logging_operator

Vendor: Redhat • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2026-10609

1Redhat

2Cluster Logging Operator

Logging Subsystem For Red Hat Openshift

Jul 8, 2026

Jun 23, 2026

N/A· v4

6.8 MEDIUM· v3

N/A· v2

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrate SA tokens and escalate privileges.Show less