IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials, escalate privileges, and potentially achieve full cluster compromise.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7270720 | Vendor Advisory |
Configurations
History
05 May 2026, 00:17
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:turbonomic_prometurbo_agent:*:*:*:*:*:*:*:* | |
| First Time |
Ibm turbonomic Prometurbo Agent
Ibm |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://www.ibm.com/support/pages/node/7270720 - Vendor Advisory |
30 Apr 2026, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-30 22:16
Updated : 2026-05-05 00:17
NVD link : CVE-2026-6389
Mitre link : CVE-2026-6389
CVE.ORG link : CVE-2026-6389
JSON object : View
Products Affected
ibm
- turbonomic_prometurbo_agent
CWE