- Issued:
- 2026-07-29
- Updated:
- 2026-07-29
RHSA-2026:47949 - Security Advisory
Synopsis
Critical: multicluster engine for Kubernetes v2.6.13 security update
Type/Severity
Security Advisory: Critical
Topic
Red Hat multicluster engine for Kubernetes v2.6 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Critical.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Description
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Affected Products
- multicluster engine for Kubernetes
Fixes
(none)amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:2a277106c9b2acfaf89bbd84c8a974f5efe818812193f07656058063028ec5c6 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72277f2871056a0446b952a5887669e259a6392d0745aa93c75afda775008c4a |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18bff3da8026ed552530a8aa200cb6d063f60c46bded9cefeee1c893fb49293e |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:74285c8dd92c4b921b1a57ab0d7f2dabf6cd279ae422154c098f28f53629d448 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:446557ca88e5b1223f224af8b77437e5396c1946acc30e55034b531bb841246d |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f1782dfc4099ec1ef127ec826278cd1dbaf7e326db989f7a3cfa530edb830d02 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7b482beb9daa96f3bbca20eeaa427af479de54c5560478ed3a5f688998e80aec |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:34d3b9de87aac6e1995d0e735fba50d55fe4719d7eb854d957e29c85e6a94ccd |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c37735dad637effd2da355a3a3bbb96b6d54dbda53947ecc1d4748218c97fee8 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:b675db31a6336da1265a1052007ad437cebbbedf37dba5e3dddc3fb1b19beb3d |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:096d651486fc6ab910955e2014f3db234282d8eb60d65336ea58eb9679ca6488 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:825f06bb2f82f56db66209a03976f4661638fc95229f5c64eb29a9706e5fa71b |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d2bb594ea0291f41a2792839110822188374012cf978198f5eb472579080102a |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:a958c347c8bbf2d620fc671379d078737138d8838e7dc6848531c913061b4a8e |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:18f9572e99b933c199fbf51005d8f2f368e9872469afb97f26b447239e7e5e0f |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:92946b8d954252c7dda5f4518e5ceae4ef26013bf6d0a6360d434facadab0f10 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a1d818901aec6f11d38f03e2be7e59ad524a814d0efd2368760c0d8e55ef06a0 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5e6bb81ffef2ebc9b514894242aee41f177965d819e1efb4c4b16530ffa8f085 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:f90263c92045d329b6bae3f9b1fd82d0f6256bb0f5a030f8a2c66ebf4d7315f8 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6617837806d4474841362a4d3472482f998babb7cc94a8288638696d7b52ced5 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:3d91807445fd9539029a2f083cb1f27c54ac349414534f8f7862c084cf6bdae3 |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:30cf9f892c01a468397be3ce802866eab7bd11337a14e9cd709e57174a5f0148 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3bb4350f81f0512ed3554b3f3bd8113ff3172469148240d4694016da0fc570be |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b1c0531d53968af44c9ff208a5ce409f053c1332b32d265268e692d472de4566 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dbda382a9df7482cbcd844793b3a023388e94ea4a292da230e068400bb0e7fea |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f0cc0d43f4367d1f3852065cca7940f75f37a0e12748dcd1dd06e24ea558c9fd |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:247525a33ab290af4b9b33cf48303edce9d0c2625c8261da8032f4cb0a213137 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:743f4839eff5b7ee58b9ea862d1602a4bcf95661bf3c8fa9ca0311c41467c2fc |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7e636de63867a0bee263298d25152ce6a52d173b833f0f19f3267fae51872b71 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:daf3a32c4056988393c9cbbee7dbd17755a238ced9eae1f442d253454f03191b |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4a45392e7f014fac294e0ac60cc2830caad5679abd5bf72d0845bba60b8a7365 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:690224d286985f9e95020f9983851db018feefb160c50c281d45534d3ed24fac |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d2181d34bd82c6a555baad7ee7df006b2fe41e448f390418fe90e8066c36db0e |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:102c21b5d058b8e7b1c541f32df239c20a06383edc806caef93e7ac2d3a27d71 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9f19802d236ddb7235661de208232dc4003e0494f4642642d73fbc8c4b06acda |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:a610cd1129545d9d38f5916ae67982519d9560a0b4d017b696a8c0c2cd21c274 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:40adf06170aaf271e3665611c8ecafd54678cf7fcad0db074ea21fe31f2c718a |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:403cedf773fc22b164a94ba6f9e64642d6d13223136d71569b8a05d58b0d1969 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:bef9a00768ffc08c1cfd4c5ad5ee7056c1714f3257d6bc90227657fe318773a7 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7b4a4dc9acce6fbba1146852cc1a3ec7092c056f96fd956f9f75206ab3a83315 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e867357ffaf948b4a5049b5442b4b0bbd9f08de439fe5ec59ea300ff17d4ee3a |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:b44f827c8ba29a336c650ee4f26cce9f091c0242418ef909630f404d365433ba |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d46c2c311aa26edd0d18ff71cc199c28408f9fc9286c96c59d6800ddc6e7ec03 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:09f85eb57abbfa147d7ade8d3372e0af7ff76496959334728f45efadfb100902 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:a087e9ea9267bd76bb3c9d2b91f778053dd2e021d4ea4c6e6b7a7561e7a7c1d5 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:427e80920a50b0e7ce023f8cc9809c72c8313a318cbca92528ba1d16285387ec |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a61cd975697698d8610da6cfccb2f8e73d04358a0d5ad8498421c1eafc54edd6 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:607e852aed80228994eca8c6abb70e4613bf88c353b108c5a91fd0b00584638f |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:08d8883c026bdb8f3cd3099958250cb890b588a15e527c3cf5a49c24d5c238c7 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0068d2ebbdf04627650e516738a4a8d126eb485dcd4ed12fe7fe579dc9a705ee |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f6fdec2f0bacea61d28e65b0593598e906d056877e5e4d4549c3f497cfa8afde |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:970d3af633ccb18742dc06ec8cd8adb0b351a23843aaa532e308c3f9eb34cb5e |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:1f819747585526e564d42b26cfa81dffb6eeb838c0acddddc42967d04b0cc96d |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:36599df21313bc011ee49b10815e996e2b0ebecae06abd07e7d8069693308166 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2f36cf0bd020814ae1c8146693d57851a804321c9120d6217ec9131f0b5b416d |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9fa4c614b4627a94b89c8b3c7746784bdd9711a3a956780c8e8fbf9c4d3b46c0 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e7f540085cc140b83a69dd065dd21242e9daada4466bfd3abb11abf3a8bae478 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:49773c963a4e0cd3b7c3b033935294b75c48ecdb3b92c4b8c6efe7e5862da95d |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:26facbad0e2b5443667ac79a074fc80ce0be0092cba36c20ca67ebf466f76a69 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d61e6c5eb222129c3df8670e282d1fb1bb95519692ae22471a6f2e3325f653c7 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:3f2185728b03b6d35d935dd6336f9d536af4c7263ea3abc2c6a2232c4a9a7bd9 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:682d163eb3cd9f179482e011443ff2e45a781a6937b0476d7e2c38720636797c |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:25e7bf1715c2ff0c18c0bd141355bdbe25a22413d93084e9c7772ff9493eedae |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:40950d8c795d570bb80eb2ae5d3f7cccb1d5c3e9f6f74836635a843cf4243141 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:48509a26cad00ecaa7c2daffc16946c03dc99e8f61a911498d5012ee1a7e07b7 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8fa5951d6f07742baf0085074e4b31a5f56984650e692141fd7671daa7accce4 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:bf71a24ce4cd38386173aad504b6a86d0d29c665684c48f64194e2babcd001e3 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:817e64eda0391d0b6283a899a2365e91c6aea030de50e648d8de6e43f383b6cf |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0e4deda529666f718f60c28381dcffcfdb2c135012beb574f254232c102f99c8 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:6dca2ab7d42fd1bb2315d6dd458f1dcc80af43234ae0eb59844e1da68e460370 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32ca1f887345088be427df934981132daf4fac1d9828eafcb55c7e99c0bd5cd6 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:af0bac2b1dc543503ea6c1794a3843fe8bab54c3b3465625f2ec49c927e99a85 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:b065126225a14580ca79420b959b15b65be846ea00b740a250a049ec32b51150 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:c227903abbb624b128fa7c9042a1b867ea4dd6688d34674ef4eae8b7994baab0 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:ac4f79192acbb3ffde42881ab01c6d43d2ce526d9abd083cc22d75fc4ae2e193 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a6513339c133fe3f1af5133992d804b1f8e77ac2b4db8ad60bcd14fe6137313f |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d0f56c01d66db837af3e38fdb78f52e079b63bd1dd2a2886fb6f740ae56e3be |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b92a79f022d50d54b18cb575c29c2d13ab681d3f775568a68a63b9f487bc29e5 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9ba3a845ecaf8f8e35314218e4655dfe0d8851d5178ea961a1c8e15ae75d11f5 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f879574236f676604301ef5b5b20015f8ca6574b63ee9f785662edefe1c22d30 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:bfed38cbd8d59e4b5ac056612be28eb26936e85f00ff2d66415070eec6b6f8e9 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d6cf02ec769dac64eb6e030d169d387e86df78ac8806ac8cb1b23d0cc42442b9 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ecec1a25ebd6562e780f4c3df749c57b01d6cceaec0377c43d6050e0bd261157 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:57d702091dcb62aead07ab9620a5b4f0609d07e045edbf5e8b25fc3fb1b4dd1b |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.