- Issued:
- 2026-07-08
- Updated:
- 2026-07-08
RHSA-2026:36883 - Security Advisory
Synopsis
Important: multicluster engine for Kubernetes v2.9.5 security update
Type/Severity
Security Advisory: Important
Topic
The multicluster engine for Kubernetes 2.9 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Description
The multicluster engine for Kubernetes v2.9 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Affected Products
- multicluster engine for Kubernetes
Fixes
(none)CVEs
amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:ffa91edb4cdc029533e51a628674e6fa101a34e61550241b5c1ac3f7a80d426a |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e286e8f41432051c5273319e6295c1ad3cd65e55210cc6ed48e2215dd7f955e2 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:91055456a028ea9d430df72ca382e3a90a76f74d54cfb1b1190798fa376300f2 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d54e902a7fd472bed227bcae35b4fd378f9185641e0f384cfb885816d10b7232 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:b3aa6e6c02cbe81844676fdf04cd7080cd62685c5d5eb7ae17062d1748af6c02 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:d3d5115fed1566371c4d6e50e50d5005a63a28043bcfef53c91f24d92d33055b |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6aa784d6b5c6084dcfb5d83b45ade4ab58b4969b0b13115eb4d6a4e494264928 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bc7d5b243dac49f4b3c87b41d8bb0b1b924fa4a54c88a143bb243d9138c1b660 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b617dc467de8d93539627f7921c72742040fd13c386dcb0b36a496e8f03685dc |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:a48a866c87939cdb8769a89d68966330df865ac5e640bf50b5a7400904f64b48 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:55473684d159a5a1dc134b7008d1262a941d25cb23a74f84106537e95610cd55 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:54cb6d38b41215647902faf5aa7adabe5e4e9a82674b9d38aaae39c604986f2a |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:51cb649a452a00e7207139bdfd704a89de5ba6d5f266a414ce96d484f6d7d77e |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:072de4171e725c56b6a24b5714b8a32ca3234255b113d6ce1a58151bc96c99d9 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:77ec1d5b973de38eff94614f269f7327eee6451529da8f324673f67140fc9e04 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:de98f9b7a4175dce690fbf192915f3fab52957dfee3555752c90286bcddab478 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e90ecc065e5fc9abcc4fbd55013ab4cc7e9627baaf822e770140f1a56c4a89fb |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bab6449af92d5e43c9cc2c12916967465ea8fb9c308c497e37da811384969849 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:fd211371e50722bbc8286bcf084b321444e720c0ac280346a06cf430facfdd78 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:407fd53991ee45eb5892f64b8b1a1ad5ca43413aabb6fe88d7b2f1281ca8e87e |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:c7d0bf6a9fc33a363aa093ce7b28c10fcfb62f3203c0dd3d8d372d33ea80caa8 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9f6c1da5ecefde0f5a8d6f1ddf8a340c7402e38edd7f637992cc4404d2216838 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:500c01cd8a9053651290abaa0359d94ac3b0be8f79bef425a548db83fda76fca |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:63f5943beb57d02f1bac358a5374be5ad56ac3b5064423a04c6d081bc91a2707 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:f71d84a5cd0e4fbbbc4c0bf8791a7be32ec9e29617bc197a326cfabdd94d67c9 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:7626f7f9f472d5e4f36fd0f70a1f3edfaf1e9c64bc247598d1f3d60050401444 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6702ff446c13226b5c9785039834c39df578edd96970bed98fa3f1f40ce842d3 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:be8e8ca069fa292780136737a57f25d92cae41ce4bf3378778dacd56cbbc10f0 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:dfcb98d8cae667e40cee5aa966e8ea0fc7e185ad53006d62f6c3326f251170a9 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:2f6ddadd53beb6bf9eb351d50f1758801d4640dd465bb7ff574103250f835c1e |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6d788ed896eb306b44bf268dab14c416c27e13c822c0111b077b177bb7f1c46a |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:00577d53535a8700a37830e9f22bf871fbc210ab69de4f1e407bd499a5d012c7 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:b15498c550e2597ee7ecb4e0a38189cf9fed807bdeb6d67b2eaff493c7e81f3b |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:6349ccc222f92889166e53cb6af9b68db171baaf6eb974463d427de04a2a0be3 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e8ecef5ef2d76e3d469636ba2cbf65371c82813150270bc088425c4fb5ce6fae |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:7f0e7edd9845622efea8df92350e8e25581617e05d21b0bac36bd245313efc0f |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:4656e3e93871b15b2698fbc8819515a21266ce3017a9ece31de9dca6837531ee |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5c0772125a65de2f9ece8b8b3232fafd17ece8461ec3a3851727d34b6ad25ec7 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5dc9e286e42d08e6c9c59b699350fc6f3d0c58e94ddb9b9bfbff2ae9bf43413a |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:55d63b0f405b102e7c54ddc48963c4cff45088580bf61aaf42ff955646fa67be |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c29e70df370378ef6a8ae4207562fbdf74c43f2e9e652e1915fdcee30fe229f |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f7ac811b030bd5f461390fdb0fb6e15b6659e8421bf0a022b9ab27c46cfe9dfd |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4c5a981fd08af319009a5812bdaab5842f6b2891ee260544fd683998b5cff2a4 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b60c7c11bf5fada3a113268d741aeec6b819dcd72d648eea4eb86f6e85366b26 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7b843bd74cbba3729ff297c53babee5d798b8a22cffbff9b6cbcb26f6d43cd72 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:54e24d0bf4abf6317184bf78f05ee8c8ac9eb52777e5461a230623efe7ca5275 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f7f7076ba24a2054f0fc963b84f5c35b81901d4f0f759f9900472192415a035 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:480400712130a4b8fdfef19d9db3b7af343defbcef15fce07314a0f62b84d998 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9b03e91e51a87cbe0eabf0d7b582bc328a01c0640d56eb79684110cf5e43348b |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4a5e033465ead2f643866ca21d8a03287c2ddc745c2bceb13323943b98921274 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7e895443e549231dd8e95c018779c4d957a0c3540261befe7a1253038071eb0f |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:6354db9e9549dbafb4242730bc761970a32872cb4e4900190326b531f380deca |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:473c54d14676c68ffc77711b7c47aef154c166dd824aec1d4661116b949f17bb |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:0df4f5d918458fcb59bd8d13d2ee2bf9f3730393c57d7069b4df7df8f8d91d6a |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:81721e6fd31bf9dfac186d9a400eb2d283e9e0ed822e0c0ff7c49bdfeb63649d |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf40dcc6c968464af3b15e9727d2a9a63f318f2da1124f2b7a068ddf39af7d |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:3fd3ec862414ecd0a916bfe4b2e2eb8f9335909913a71b092613d1a828b2dc38 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:90f5ca300fcc97cebec2bdd438ec7e0536b3c26c0363ac6a090ba2c38be72440 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb07d77c81803fb6a03c9b140ac353c30d02123defa72aeb5ed577e82647bfbc |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:5ae5d1243cafa9b77db932f08d21d8a627327d1eabec0fa752de0d81c8979779 |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e3805a426731127addc201a859b9b06d8268fc51f5ffee1df0005c2ea9f7207f |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:919543b8e5dff86dcfc09e510d395d731faceac165ac414f2ef2142e8c2afaca |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a715dc56d04a6f09b35519641c209c84b1c926d24cd43d54716e7321254571be |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2b87874e7e95b2c87becc1f89e6a969927cf7077d9c738f8a3da5b422a81bf8b |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7177391f7275d140c5a2da3793e52f9f06548da004759b27aa667803d6959eb |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:d935bd9d2f36a439d2e43b294cb396d4001edb6a0f170cfe82f38bbbaf0a3975 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:466ac487359a228df40d187581ae3733f4417a8720ca3e91a0ee17853ccfc873 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1074625636a1d801b949d1b29822752eb4599cc62a4162170e3820d75a02ba45 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:02c6dcbf817d479fba695e59e5f0588c7fce19c723f7a1e079a9dbaa530d52cb |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e6cad0e543e3e5115163d31036adb9e172f45ed49933ae05710c5b880b198f8a |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1cf3b71a5850f9b9d7438f62760cffb028751c3e0d05f4698a8f91ee278ad000 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:72927704827b7908aa73b8b8d5c7a9bf67668575d446939bac10be75cea8cd68 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:459ae22d11af87a6c7b86484d20d29bea5c549636c4dea3926962fbc453f28d3 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fb12f654f22b5881305deadfc2e9439cccff67c2c375883680990fc51709a0ae |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7a0591b599284e447cf703b0ec6c7959e6c5c957f8d0870fe655fb0645a445b8 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1dceb30882e8dc4f735686bee3332f3d4ebdfc77b1c286c5452d18d3e05bec0a |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c3901e276e04840bc424bcb94a0e4f3ad4237d24d368646cabd75ef29801af7c |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:c3be5478d85c9474d1c48b502a72a79df108c53e6f359c792299b60d7703ab31 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2391db1f165e27aec79e877e99f351a734144de9504a03c0335830416a07805 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ec8f55b303a885b80a3011d7d50fafab764ed18e93f77dba40dae5bc374ec32b |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:55d859fc1c180fc132d682cea34fd7f43899dd380778efa42f9957327641592b |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:7effba338ce3ac12d01a17c068e5d4db19befbd343f250f691416ea38c70b992 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:5c1258722de28107a118823d1b592c747ae1ab0ff6c3177eca856ac5e150036f |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d197e24ff2085f38d83541c5ada8ad8bf4e5dcac43cf2fa3eb80bb0eb0bc653c |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:068bbbc2bbec404248810b7cf4fbc2f86325e530945d36a41f588742e5b5a8ca |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:37cdf186a7095cc07f9b9286251b181b5e93639ce34cec3b3835e22f220bf337 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:313396e8399e6e000bd79d7d51277d2862be63cc306af940de674d52119e97e1 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e21f2beba8413f488781c9cac9113cd8d3c430c7bd3926a9ad54642602fb88d0 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:84a4e4a55b3438e9535018b3bc4c508e008b0b2d6fcb67f9923b6780c6db6f88 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:ab07cb1e66bffafb2cba4c478710dfaae95c4686a602edd8b51d8fd9292c75c7 |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:55b2e74553ff5b1667f24f9806529fe9979dce7f82941b4a9c132f401eeb5cd6 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:24fbc8f867f364157ba75c3e185c48aba6a2f4d95c970b48391cfbc4718b2b12 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1f7829a7db6cf88c47109bb88a988e9426a460b818b412b367cb5466c3fa1a61 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c88bb08c4f3c381cbc566b04b46c13f1e9e4eb9be75b30372aee5cf65c6e7549 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f662b1155fda28d3fd3081d0ef49ec707a538e208953460dd14097bb79455ea5 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:a5247449bfb03f65147ec30d6694851925038820c9f65fb2d121df4e19f138af |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e437b4dccab913b24a015081d7a4a8a94d03a407e58dce97f518f56fd003f92b |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:79f5d549ed3919d9916d80c7a4d4240dc26e0876711d05e55a6bced22a42b7e0 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:93eab8f6d49a40667beaf65958382137aa6348b5e6d38d1f575b09dfde2c6648 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:cdbbebb6acb3a120bd5fe58eb4bbd0018e553d61080e21e94379a1e1128c58cf |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:b915c7a3aa3127ba46144c5c252e22d3b1f7b5976a0d58fbb9f0bbb60baf6e44 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d8544d75d0806bfad40c6bd05c41d0c0bc783b16eb67954fc7f214820861f614 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:232b993641d1a7e8d5a00498d9511ad419c18d467cb8b3088bdec9369df6866b |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a6fb27e4679ae00c60bffcc4bef23af937fa13920b363b2401abe8b62a337799 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a3d80acaeb45670e20e2e05e7f62f9d72890e70e5806b876f4def4690e7470c4 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:cf92f9c8345e28e22c89373f0a22b33486fa9bb87276e1baba19ddc1ca5dfddb |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:8ebed14b1ee2624212269448459932f94e6e37087732fdadb0642db50f7382ab |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a6ee1cd474411d48e04cce8a775c808dcf4aadbba00cd2fa4b260a891ab24be3 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:62ff02543f93e228e2b42be27cbcde4cc76f53afe70884ad530ca78fa7c120a4 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8d79482d7983e9ffe1d4e647c4a9e61daeb2a6aa87d630c6f83ba8673341afad |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:f301b26bb01fe9dc6b492445c066f6a542462d1be736a0c01c492b79119b315f |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e57d3eaf392357fc458a1c9e85507f904bb539ada337dce4e299b92e1f4888d1 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:02ca45c5cca4331bc71c088b896fcccb249eaee7969e4b7bf6d518543d054bdb |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:e2f8f189ad22ade636a864846057a00c45a42c1109209e9db0ba6fa0327625b6 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:026b3dfdc59bc6cab91910effa5b3f7b689c0647fde7b365b68cd2c9e79b3b83 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:b131b795635c8ad35c7305f18a4329d36e38d5d7d54bb0b79ac49dd6ad3e323a |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:553be40de5d2128908d101d1c029e6a5595d3288e5633163df2b0a526290bde9 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3afd00948c3f3097a1aa12a81f7cb39959f23488f150369d383327c2242a2d5e |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c71ce0cfd2843020a685fb419ab249aa035444bba254e0e2411034ef2bd906b4 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:09f2b03dcaf915da65c626ce07d96bfba833eebad281093aecf7d092d1132ad5 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
