- Issued:
- 2026-07-29
- Updated:
- 2026-07-29
RHSA-2026:47735 - Security Advisory
Synopsis
Critical: multicluster engine for Kubernetes v2.8.9 security update
Type/Severity
Security Advisory: Critical
Topic
Red Hat multicluster engine for Kubernetes v2.8 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Critical.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Description
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Affected Products
- multicluster engine for Kubernetes
Fixes
(none)CVEs
amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828 |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2 |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224 |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
