Privileged code execution via unvalidated image override

Code execution in submariner-operator in Red Hat ACM allows remote authenticated users to run attacker images via a crafted Submariner CR. In Red Hat Advanced Cluster Management for Kubernetes, the operator accepts the image path from the Submariner custom resource and uses it for workload deployment without validating that the reference is trusted or expected. Exploitation requires cluster-administrator access, or any role allowed to modify the Submariner CR, and the resulting pods can execute with elevated privileges on cluster nodes, including control-plane nodes.