Red Hat Security AdvisoryRHSA-2026:48284
multicluster engine for Kubernetes v2.17.1 security update
Released 2026-07-29 · Red Hat rating Critical · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.17 registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/hypershift-rhel9-operator
Fixes 2 records
Priority MEDIUM 50
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00918 · Published 2026-07-20 · Fixed in 1784905766, 1784945966 +13 CWE-306
Priority MEDIUM 40
A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE).
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00568 · Published 2026-07-24 · Fixed in 1784342329, 1784925025 +3 CWE-441
