VULNERABILITY INTELLIGENCE

CVE-2026-6389

CVSS score8.8 HIGH
EPSS probability0.13%
CISA KEVNot currently listed
Published2026-04-30
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials, escalate privileges, and potentially achieve full cluster compromise.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references