Submariner-operator: rbac permissions can allow for the spread of node compromises

Description

A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.

Timeline

Scores

EPSS (exploitation in 30 days)

0.51% · top 56% of all CVEs (7 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.6.

Weakness

• CWE-250: Execution with Unnecessary Privileges (opens in a new tab)All about CWE-250 and its CVEs

Affected products

• submariner-operator

  • affected < 0.14.9
  • affected 0.15.0 – < 0.15.5
  • affected 0.16.0 – < 0.16.7
  • affected 0.17.0 – < 0.17.2
  • affected 0.18.0-m0 – < 0.18.0-rc0

• Red Hat · RHODF-4.16-RHEL-9

  • unaffected v4.16.0-19 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774540992 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774540668 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541259 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541345 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541880 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541518 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541420 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541448 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541663 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541469 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774542075 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541617 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541614 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541633 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541625 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541625 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774542179 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541779 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541857 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541919 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774541919 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.20

  • unaffected 1774542101 – < *

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: affected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: affected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: affected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: affected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: affected

• Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2

  All versions: affected

Affected packages

From reviewed advisories of the GitHub Advisory Database.

• Gogithub.com/submariner-io/submariner-operatorGHSA-2rhx-qhxp-5jpw (opens in a new tab)

References (5)

• RHSA-2024:4591 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2026:6503 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/security/cve/CVE-2024-5042 (opens in a new tab)vdb-entryx_refsource_REDHATx_transferred
• RHBZ#2280921 (opens in a new tab)issue-trackingx_refsource_REDHATx_transferred
• https://github.com/advisories/GHSA-2rhx-qhxp-5jpw (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisory GHSA-2rhx-qhxp-5jpw (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-5042](https://trackcve.app/badge/CVE-2024-5042.svg)](https://trackcve.app/cve/CVE-2024-5042)

Record last updated 13 Oct 2026, 23:25 UTC.