A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests (CSRs), which could lead to information disclosure and privilege escalation within the cluster.

FIND-002 from Project Glasswing AI-SAST audit of open-cluster-management-io/managed-serviceaccount (audit date 2026-06-10, commit unknown). The open-cluster-management:managed-serviceaccount:addon-manager ClusterRole grants get/list/watch/create/update/patch/delete on secrets cluster-wide plus approve on certificatesigningrequests. A compromised addon-manager pod can read any secret in any namespace and approve arbitrary CSRs.