Red Hat Security Advisory

RHSA-2026:11511

Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.7.10

Released 2026-04-29 · Red Hat rating Important · View on Red Hat →

Fixed in

multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/assisted-service-8-rhel8

Fixes 1 record

TI-2026-06286 CVE-2026-7163 · GHSA-62pm-2jjw-mqpx

Cleartext storage of sensitive information in assisted-service

LOW 27

A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-scoped privileges to obt…

CVSS 3.1MEDIUM 6.1 Adjacent network Low privileges User interaction EPSS 0.00194 Published 2026-04-30 Fixed in 2.7.10, 2.9.4 +8 CWE-312