Red Hat Security AdvisoryRHSA-2025:19958
multicluster engine for Kubernetes v2.7.7 security update
Released 2025-11-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +5
Fixes 1 record
Priority LOW 28
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00243 · Published 2025-08-07 · Partial fix · 0.15.2, v4.17.39-2 +119 CWE-276
