CVE-2026-66787 — Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses
A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addres…
Published: 2026-08-20 · CVSS: 8.7 · CVSS 3.1
A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with attacker-controlled IP addresses, causing other clusters' lighthouse DNS to redirect legitimate service traffic to malicious endpoints. This enables a remote attacker to conduct transparent Man-in-the-Middle (MITM) attacks on cross-cluster service communications, potentially leading to unauthorized information disclosure and data manipulation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7