Summary
generated automatically from NVD dataSubmariner fails to properly validate the network subnets that a connected spoke cluster publishes in its network endpoint. A malicious cluster can therefore declare arbitrary network ranges, causing traffic from peer clusters destined for those ranges to be rerouted through the attacker's tunnel. This could lead to unauthorized information disclosure or network disruption, and the flaw is rated HIGH with a CVSS v3.1 score of 8.7 (weakness CWE-345).
NVD description
A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious cluster, enabling it to declare arbitrary network ranges. Consequently, all network traffic intended for these arbitrary ranges from peer clusters will be rerouted through the attacker's tunnel, potentially leading to unauthorized information disclosure or network disruption.
EPSS · FIRST.org
0.16%probability of exploitation in the next 30 days
Higher than 5% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-16, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 20 août 2026
- Updated
- 18 oct. 2026
- Status
- Awaiting Analysis
- Source
- secalert@redhat.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-345
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.