Is CVE-2026-89060 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-89060?

CVE-2026-89060 has a CVSS v3 severity of HIGH (7.7).

Back

CVE-2026-89060

Description

A flaw was found in multicluster-observability-addon. This vulnerability allows a managed-cluster identity to reference configuration resources outside its designated namespace. This can lead to the disclosure of sensitive hub Secrets to an attacker-controlled managed cluster.