Threat intelligence dashboard
CVE-2025-2241high

Hive: exposure of vcenter credentials via clusterprovision in hive / mce / acm

A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract sensitive credentials even if they do not have direct access to Kubernetes Secrets. This issue can lead to unauthorized VCenter access, cluster management, and privilege escalation.

Risk score

8.2

CVSS 3.1

Vendor
Red Hat
Product
hive, Multicluster Engine for Kubernetes, Red Hat Advanced Cluster Management for Kubernetes 2
CWE
CWE-922
Published
Mar 17, 2025
Updated
Oct 31, 2026
CISA KEV
Not flagged

Affected products and versions

hive

Version / rangeStatusType
1.2.4105-7735bf3 to 1.1.16affectedsemver

Multicluster Engine for Kubernetes

Red Hat

No affected version range was provided.

Red Hat Advanced Cluster Management for Kubernetes 2

Red Hat

No affected version range was provided.

Technical metrics

8.2

CVSS 3.1

Severity
high
Source
redhat
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N