Loading market data...
← Back to CVE feed

CVE-2026-6389

HIGH CVSS 8.8 View on NVD ↗

Description

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials, escalate privileges, and potentially achieve full cluster compromise.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: Apr 30, 2026 22:16 UTC Modified: May 01, 2026 15:27 UTC