{"vulnerability": "CVE-2026-70398", "sightings": [{"uuid": "712219e8-9731-4a59-879e-58f64afd2237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msu3iq2wjt2d", "content": "CVE-2026-70398\nAn authenticated user with access to Red Hat Advanced Cluster Management's multicloud-integrations can redirect sensitive tokens to their own control, potentially exposing critical information and bypassing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-12T02:30:04.277074Z"}, {"uuid": "64cb8264-0c56-47b8-a225-fa34249a68dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70398", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117080301494306509", "content": "CRITICAL CVE-2026-70398 in Red Hat Advanced Cluster Management for Kubernetes 2: Authenticated tenants can redirect bearer tokens via GitOpsCluster controller. No official fix. Restrict privileges & monitor activity. https://radar.offseq.com/threat/cve-2026-70398-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-3d1f26674efa89dc #OffSeq #Kubernetes #RedHat #CVE202670398", "creation_timestamp": "2026-08-12T03:00:24.643336Z"}, {"uuid": "d9317971-48a9-4734-b120-f793ae970e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70398", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msu56zlp6l25", "content": "CVE-2026-70398 (CRITICAL, CVSS 9.6) in Red Hat Advanced Cluster Management for Kubernetes 2 lets authenticated tenants redirect sensitive tokens. Restrict privileges & monitor GitOpsCluster controller while awaiting a fix. https://radar.offseq.com/threat/cve-2026-70398-unintended-proxy-or-interme...", "creation_timestamp": "2026-08-12T03:00:26.583721Z"}, {"uuid": "ed65c35e-a5c5-44ce-aefc-533cf81c1f35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70398", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msual6bwgm2h", "content": "\ud83d\udd34 CVE-2026-70398 - Critical (9.6)\n\nA flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70398/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T04:00:55.493681Z"}]}