CVE-2026-10840 - Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resources
CVE ID :CVE-2026-10840 Published : June 4, 2026, 12:16 p.m. | 57 minutes ago Description :A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via...