VULNERABILITY INTELLIGENCE
CVE-2026-75485
CVSS score5.5 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-08-18
Last modified2026-09-05
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather archive, potentially disclosing sensitive authentication information to anyone with access to the archive.
Weakness classification
- secalert@redhat.com: CWE-532