- Issued:
- 2026-05-19
- Updated:
- 2026-05-19
RHSA-2026:19109 - Security Advisory
Synopsis
Important: multicluster engine for Kubernetes v2.9.4 security update
Type/Severity
Security Advisory: Important
Topic
The multicluster engine for Kubernetes 2.9 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Description
The multicluster engine for Kubernetes v2.9 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Affected Products
- multicluster engine for Kubernetes
Fixes
(none)CVEs
amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:a494445f6891f9654778558d761bf686547f908e166d7d29f927335ad356a297 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6dcabd4d79bf45e7dbb8e28cbe545fcae01c3b833b74b605901dfcb43984956c |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0f893471cae9dfc849dfcc99a0f2b097bd03181a3b0bf222b882565cd95cb8f5 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:57fabaaf793dde7e2da4a879b1272b34e5ed8a922050556235c97131803582f4 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:9614feb6c796412d800cc38af86e5671f759a31ab87b7e8bfdd335a81c85e434 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:3a036222708594b2561ccb94439ad40a961e57444801cce9d359fc13f65f67e4 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6fa22a8e16f8454f7644880a1e54046a410c5ee8dc65922d3ddb84f2ef4169b5 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d5fb7873855f5c822e1e0cdabafb959b7990204593ce909692a5eee57b77f39 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:42cf1ea478a1fbb044206c3363a2b90a476e6dc8bbe848d9fe1f757853883e1e |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:fc480ba2af2734e55df05c717517de6c5ce5fcf1ed31b7fe8154c2ac6e0f7e22 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:9382c0cf93d5bfc0e844aeacb5507aefa8b6358bf3c211890adc5a78878140d5 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:05795eaf09ca12bd7aab88913aab4e5e69b01d8e5b7c17a25d994f3fd73c5fbb |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b841b410445b598fa0973fdfcb5d291210ee3de56beae9c45b347ebff689429f |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:af5cb70926e08b26674cb8bdd6815ddf5774485316e1b56914a61aa76aff5472 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d17d2283155dd0c8e8fdc20632d203bbf5a86fb1d036dfecb7dc69c9b14f511 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4ea56397067c086da49f17a0c9d7798e95f9afa6ab84c0fc82eded5ca872faa0 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5b363a6de7d61483b3d4fafb4ff2ef1595646b8b25f4fed856c4248920b8e2a3 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:692d95061e297f0abf0790600ae22fcd3812c805ea40596868e6ab78f145b3e6 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:7bf9a950c299469b2d2a8ff212402d023006e47be60ddd16dddae90e1162af15 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:221ec4b85818306e291b186940ff11dacf1ac3d3f93c3497c4c015b330085aa3 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bd8aa2ad291cd9694bc2519a3a21aa87d78abbeb138b5f0664642d0579e8e83c |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:02a16849f3d6796dff513310aeaf146646d05aaa73ba5be3d1646e0f4dab15ea |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:1ec724ed0e2d295e618ab30d34cc9d43f35fe3865eca07a33262bf6db3721170 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c235746b8a649d2bd76b9298eed04e40050e390a8b67d81689b57ed1b8b1cce9 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2ae9ec58ab90950287619bc4554ae10adbee985a40e1c6317da7c9e4ee939901 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:b44526d1f6ae10d7a8414f2de898de22fc33327bea775822876ab4a5471e3f79 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cf89cb2473f0532b372f70f201efad5eb7b077abaf95bd1d02a450a21f4894e1 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c8f143864c8a61169286fa65f70aaf039116bed907bc854aee67702a63de5304 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b67078ca18e0b06dd6d96b9c364ec49be0608880546ae0aeeb68a2e846d5180f |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:164208da5a3588b293bb3852c6ea7737ffbb176281331b2c0c8e5097e8a6b7f1 |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6d3f561bf0b20e21b5b9cd4991a733433aab38de90c34a78ee6c7072451b6eb2 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:f198c7dfdb9c0ac24dbfc7d3697a47e77d582a51e1715a08c034641c0e5dda9b |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:26ca7d0518dcd2c7740b8e26f80fe6d77437c94e5e8cc578a47a07cadad3bcff |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:600f12c3ae9675d97f28ea8a79a5452894055b367c958006ba8ef4e7fedd5d89 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:9c6e847cf4a44ba9f0e16af44306dc3b99bc5b5e3195b15312db0c7b298dca48 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:9beaec71c8c41bab98add30b64ed7cd863421487e991aedc1d9b81331a97d3b2 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:cc499ee9c906fdbe8478e0678c835d9eb48403b97faa913cf312490faa420d8b |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:f98ad0598ff7c9ff54f530d26a14b14ec994c9338cbf2cd2bd75dc8c0626f794 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1c1b0f2e2137b6cca0d05c8edf9b5ed0069048037bfe89bf846afd34c94ba66a |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:edf0a0cdbb4126f2df6de9db5cf1f5c7f5a52f3d85776b727e1afe086cf7fd68 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:b7afaf863ae31c2b399a9a632aac10d518d527e7e3a02dd6e3e11d6dcfa211e1 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89309aa96d725dd1a88772c9c1d603f0ef8485d1c26c46ecebef3e92cc861d12 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:33ddb291657ee398de1ab6cb3a8105317e83642b1e1ec3b68780ec3d0bea9b4b |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:501fb4ce751330a527b660adc3e055da2066d7a0773316bf754b3b54f3c56569 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:94fa700b69ee7ed194aafd47f90e1fefcf334de605158d88a8452e9169953b7d |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a0ee26d6e016c7eb1ed9b9a4538b80a4ef7a501ac710abb695410dae287628bc |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:523890006880f0a615cf786e6211ebd5b28155742bbbec9f23f3293c9b19d4c8 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b3ff1b42b85be4a94d4ac4f89ba2fee04e8d0e96f2b06f60f18aaf6b291e8a2e |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:bfbe3757aeaedb814032b3e4182aab7180552966035c5aa9b97397aa6a9e41ad |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:75256e8214a3e0fde520ebeb208ff77480c97836cb599fb5c5b7477dcaf8cdc5 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3d6a101ba850c465a53183e0fced85a9b7ba007fe844504c9a47ca3d9a880d9 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b2edf84faa3f28b30def260151fbd1dbff0bab9e98c415ae8621c788556a9cd5 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d8ef9b07100cf5dd2899746603afe52f3a9feb8b01f09297faf08d67c9d6b061 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f8510b55a7b6c9a8b06f0ec3620e8d3177c6b182f9ec08e63f2e6f626b12ccba |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:cf7d5e800657dd01ada928519b7c52036c7e5a5d8b6a56672bc463f5ab7ec383 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:47d5ddf43c8a54835d9975428300ec94d2fa2b8a3717dc7363caa41a11dc4759 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:30b15f9efa4e30e35e94cff740a224143d165ddc007299dbde2e83787de38ea4 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6e75041a588ebaa82004665f9cb4c4ab5a60bbeabb21b89f7b5174dfa8ec6dfa |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d05454abe293aaae90d10d07088476849787903eed6490b058285be85a39bff6 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:4a94c8f235ab4e97db954d4782e22ac0745d05d03effb865273cec452e003d1c |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b37db0964b69e992e8cc3bf65af4b9a2710fbc0eddf197aca11b8757685e5359 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:bf2f859ee93100fd5d7f7fe000072373cb202c636a4fc77f2327ed5e43906db1 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:72d383e2542d4abbad9637eb21471872fb47791d606098b059307f6c663729d3 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5ea5e7867cd22994fcfbca7a0fb6ad9513eea46421ae875eea35bd7680f6033d |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:572d16a4b25a6870a7e98a2f62618e16a6ce861b9334467a4479afee7536ff8f |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:612c5192f4bc23d43dd95f3a47a9615aacddb296688c0f30894e9b32c072f63e |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:264798d6bb5200c74ccc549c28e37663cf1841a24ae460671d0a2562fdd272bf |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:e627f573e8f0e8aabe0efb9330d644d0e79939872de6b2eece69721c3b488e4b |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c373f0b8c76cb51b40f4a5de9eb2a17cad01e3c4552c5dad943d678cdab0926c |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:a2a8b0622c9a6561bc1346b7c3aa40389b179fad630c3225aba424b870202bb2 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:baa4b9860b93f4b14bf8147b9634288d67dc8d9c2e23455c85a02f05a5f8eb13 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8cb09cd90ce239fd652e104064687f0e2e83fcacad7d3f19610c747c6104162e |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d0bebe38b0a2cc4d55e08597e48b7c3909ddbe3794075e13ed192767ff419f42 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:667ba6b836c81f354b0a50ec4e781caceb8732e3d70dd6bbcd010ddd1f7665a6 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6c7b580e0b733741e395b98c1f0e28d4ea78d3942fe5a12134fb28fcb1bbeb0 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4704b584bb37f1e5eb838acefca6d9d865fab012a397fa4dc2ff6349e3c287d3 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1c4e45f388f84e43033bdee99960f6bd1fb14ba42242b41fa5f4789e54bf85d1 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5e16b5a4d04fe920634e75ca48ce53992c4b2d2d82d9e497c3840f72e997fea0 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2f45385252d4e84e800574e51397b98f48f0006edfe3493b97457ac7920bcf38 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:358709c6d0544dabb9630cc417912b63e2bcc5a29dcf4ac2707687e9b6d1fd47 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9758d76af68f594db8cd577d31d9c776b5d8e098082470d4e4d8bf2794dcbafa |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f7fb8cd1d8357cddd5d3ccd577d849dfbf36a1d35d1055d29d262497769d3209 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:21920b99598540d1de0b9ddac3bc8b2a41ede368b8ec266a5ed068f9243610bd |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:2d7ca47288fa022ef4d0197136c21a0ac546f7c4b7515805cb97aea3c92adeaa |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:8155757ed4a6ef63e1b8fa164c4ebebd9391e232774c546b2935c3d0af73ea0d |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:398dda473ee10b4dfcedaad8468a3f5b41b564f2c2d66215f4f14d7005e75adc |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:09abedba5ca8a28153e7e83585e804e95212b34f844e775541af1803c466d115 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8198f70c9f6c89099b80100a0a4ff27520628d41b6aed9940d31238039457403 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:4ef24b8f9fa20f3fd41dd8e753d21bec5e8aa3e0e1920c6ab53f801952ace29c |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:9934c552556a253addc5cc118c6345b85aa1a7a9dbb56ab2a34e36b1c3c10d26 |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:13f6c1d3e139e65a31b33eaa6270801d119312b3d549f18d067d20f70ca59b35 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:47f51e3b0ed4c6c6ccd4df06532b4cb9a9986d9da032c43c36c2e51139691f17 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fce839dcc1fc4d0b67331c3e84325b9f5e5c588a536270a0ea7386115e7d5767 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:067ae6af633a50e85ef6348051dce465d8f405d1c9d834e625a4e316826ca39c |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4a07e84760a76110dc4ecc5514fc9471ab54af42f89a42ece36de21b45baeaba |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:7d1b7afd61238d73dbb0f3a82de2e940378b719bbb1603d8707f134ec6c89beb |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:86b6c1ebba0aba5fda2158d076e2c89ee4b409d5327fdeefd96ca52f17e652cf |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:e92fb8d452030629b30369c4320fe16d7b25eda614df5d85b57c140be785bc22 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:36f4e64e02c367346fa12a937b48277952aafd0e7b19625073a9522a986fcf9e |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:2be3d1919884cd377417d825b24f51d7b8ae9554186f0b66fd6d80a485058a25 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d762aae1a7e2d642a58936dffce59acb1e74c6038c6b59e21dcc10c8677838b6 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f381adf0073b03d2e2431ad9e9e110eacfc1d5ad64de93771c9099c2bf6a8d63 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:18e046dbe314b64101e1961eed3665af8779a0bd07dcbb64938e5afc26a78498 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:766cb6496bf8b2970b844e5fdaba3cc7945e4e261fa8e79e6a450940c9f8b6e3 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:5e3be81e0caa512f1e32531d8e8459a4031fb55f31ff85e9ee5ecbb4b9fe5b45 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:de85530a1efedecf12066b96a453a1ec25e2065e81c7d6dc1dd145def5f288c6 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:46a6165ae098a6cf40f26af89bcffcece0671ee0b79eb40ab322a79776c26bd1 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:8e118517a085dfb4edf3934cfad0b6a6962ed267489b9c10eb9de188fafaf9c1 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0ba2d40e24005f33ddb2ef7f15c9a3aac3dfa90158ea312e060c6ffa7161b121 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8d25be4a1fba11c79d6c9a29e095730b1602e9e475b8e21293e4d434184d5386 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:a2899f60676bc6f3572ec4b5ec9ba0d3eb72eadd1efaa4efe603e79bed6eeece |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f94def629bc8d68767bb5f9c63a7cd39e4204d2c70cdc8a22e2d252cffd3ae54 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:263dc7d88ced606b75a73f665ee23af765baf8cc99e041441b8a50565574fd8b |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:745a81906e7afa428879a1115561dbbfe150e35355416d05cecdc3a5c8b781f7 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:cc6ee80f5eff7d72b9657cd4522ccb68d7ab3aa0d4d0501a1e88910a8dbff5c0 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:2aee52b720db820a938a81ca63c28ba5e1c03ed1af3a954bd8c42e47c45c1ea7 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:f2e2a0e2ae9049c108b5c4c3199a42a06e74af839d438977579764ab4303d9c0 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e48f08e785994de755208737565f7ccb9fb8780197d502a8939b6af807b44681 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:7c56971c8f9769cc74d35f7c80947d3b9fd439b3d9d389f370fdd9a898eca28a |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:a9a10cb66630da05bdb00a1eab72432433973fa985c03d9d6c587042b5300a30 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.