OperTraitor Finds Kubernetes Operators With Cluster-Wide Secret Access and Admin Paths
OperTraitor finds Kubernetes operators with excessive RBAC, including IBM CVE-2026-6389 cluster-wide secret access.
61
Vulnerability1 · 1 read
CVE-2026-6389
- CVSS 3.1
- 7.8 high
- EPSS
- <1%p1
- Published
- ·
- Modified
Description · NVD
IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials, escalate privileges, and potentially achieve full cluster compromise.
- Vendors
- ibm
- Products
- turbonomic prometurbo agent
- Weakness
- CWE-269
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
3 storiesOperTraitors: How Kubernetes Operators Betray Your Security Posture
Unit 42's OperTraitor flags overprivileged Kubernetes operators and found CVE-2026-6389 in IBM Turbonomic.
61
New OperTraitors Tool Reveals Dangerous Privilege Escalation Paths in Kubernetes Operators
Palo Alto Networks released OperTraitor to flag Kubernetes operators granted excessive RBAC privileges.
48