TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3
gRPC-Go has an authorization bypass via missing leading slash in :path
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
RHSA-2026:12337
Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.11.1
Released 2026-04-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-rhel9 +1
Fixes 2 records
TI-2026-06286 CVE-2026-7163 · GHSA-62pm-2jjw-mqpx
Cleartext storage of sensitive information in assisted-service
Priority LOW 27
A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-scoped privileges to obt…