CVE-2026-73834 — Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected wi…
Published: 2026-08-18 · CVSS: 5.5 · CVSS 3.1
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulting archive, potentially exposing sensitive information to anyone with access to the archive.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7