Vulnerability intelligence

CVE-2026-6389

IBM Turbonomic prometurbo agent CWE-269

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials, escalate privileges, and potentially achieve full cluster compromise.

CVSS Score

8.8

High

EPSS — Exploit Probability

0.1%

Riskier than 3% of all CVEs · checked 2026-09-30

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published