CVE-2026-103314

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS)

Risk score: 66/100
CVSS: 7.4 v3.1
Exploit chance (30 days): 0.4%
Published: 19 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: A flaw in Red Hat Advanced Cluster Security for Kubernetes (RHACS) allows an attacker to submit a valid SAML response multiple times and receive distinct authentication tokens. This could lead to privilege escalation or other security issues.
Affected: {'products': ['Red Hat Advanced Cluster Security for Kubernetes (RHACS)'], 'packages': [], 'versions': []}
Fix: Check the linked advisory for a fix, as none is provided in the record.
Exploitation: No known exploitation

Why it is Amber

CVSS 7.4 high
Remotely exploitable without logging in
On your watchlist: kubernetes

References

Original description

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.

Last activity 19 Oct 2026. Patch Forecast updates every hour.