- Issued:
- 2026-07-29
- Updated:
- 2026-07-29
RHSA-2026:47953 - Security Advisory
Synopsis
Critical: multicluster engine for Kubernetes v2.9.6 security update
Type/Severity
Security Advisory: Critical
Topic
Red Hat multicluster engine for Kubernetes v2.9 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Critical.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Description
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Affected Products
- multicluster engine for Kubernetes
Fixes
(none)amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f2b1ea89001a5589317bfa45e0e16456e27c503687db0ad0e9ec0a1502d9a6d9 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e286e8f41432051c5273319e6295c1ad3cd65e55210cc6ed48e2215dd7f955e2 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:91055456a028ea9d430df72ca382e3a90a76f74d54cfb1b1190798fa376300f2 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d54e902a7fd472bed227bcae35b4fd378f9185641e0f384cfb885816d10b7232 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:b3aa6e6c02cbe81844676fdf04cd7080cd62685c5d5eb7ae17062d1748af6c02 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:d3d5115fed1566371c4d6e50e50d5005a63a28043bcfef53c91f24d92d33055b |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6aa784d6b5c6084dcfb5d83b45ade4ab58b4969b0b13115eb4d6a4e494264928 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bc7d5b243dac49f4b3c87b41d8bb0b1b924fa4a54c88a143bb243d9138c1b660 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b617dc467de8d93539627f7921c72742040fd13c386dcb0b36a496e8f03685dc |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:a48a866c87939cdb8769a89d68966330df865ac5e640bf50b5a7400904f64b48 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:7ea875aed1975bccd00d478e0baa8d44160093c85eb3601ecf2239697f7abf50 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:54cb6d38b41215647902faf5aa7adabe5e4e9a82674b9d38aaae39c604986f2a |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:51cb649a452a00e7207139bdfd704a89de5ba6d5f266a414ce96d484f6d7d77e |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:072de4171e725c56b6a24b5714b8a32ca3234255b113d6ce1a58151bc96c99d9 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:77ec1d5b973de38eff94614f269f7327eee6451529da8f324673f67140fc9e04 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:de98f9b7a4175dce690fbf192915f3fab52957dfee3555752c90286bcddab478 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e90ecc065e5fc9abcc4fbd55013ab4cc7e9627baaf822e770140f1a56c4a89fb |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2ae780f99f4423840e514014b61f6ffa110ba248ca06b9c593963ff2f4d978db |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:da3a921105fb82f1e2f52da165d9838359ceae1e13647459856824731d8af3e9 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:31112fed243b910989083bf307ca1fd1e1a5d4f6dd477b35b13527990f6d5165 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:c7d0bf6a9fc33a363aa093ce7b28c10fcfb62f3203c0dd3d8d372d33ea80caa8 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9f6c1da5ecefde0f5a8d6f1ddf8a340c7402e38edd7f637992cc4404d2216838 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:500c01cd8a9053651290abaa0359d94ac3b0be8f79bef425a548db83fda76fca |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:63f5943beb57d02f1bac358a5374be5ad56ac3b5064423a04c6d081bc91a2707 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:f71d84a5cd0e4fbbbc4c0bf8791a7be32ec9e29617bc197a326cfabdd94d67c9 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4095afa3042be781ebd397ca5dfa6f4fa5b7cfa16f72bfc40f567fc96b8084c5 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6702ff446c13226b5c9785039834c39df578edd96970bed98fa3f1f40ce842d3 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:940d549a865cfa0df84f1c6b819e4356cdfa5875d138b5df8fdf593a4117ae20 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:78178f01a4910b8e8476994b9fabd67d683a9efe57e9d5785d0870c3cf3839ca |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:159b5139544addd202b8e1a5029d5fda0587cf9ac6494d5d4304ec4b24aec613 |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b72c300f7779a0d52c853467709fed3405978f80b97071b719a720bf5253aac7 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:00577d53535a8700a37830e9f22bf871fbc210ab69de4f1e407bd499a5d012c7 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:b15498c550e2597ee7ecb4e0a38189cf9fed807bdeb6d67b2eaff493c7e81f3b |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:6349ccc222f92889166e53cb6af9b68db171baaf6eb974463d427de04a2a0be3 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e8ecef5ef2d76e3d469636ba2cbf65371c82813150270bc088425c4fb5ce6fae |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:7f0e7edd9845622efea8df92350e8e25581617e05d21b0bac36bd245313efc0f |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:4656e3e93871b15b2698fbc8819515a21266ce3017a9ece31de9dca6837531ee |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5c0772125a65de2f9ece8b8b3232fafd17ece8461ec3a3851727d34b6ad25ec7 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5dc9e286e42d08e6c9c59b699350fc6f3d0c58e94ddb9b9bfbff2ae9bf43413a |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:55d63b0f405b102e7c54ddc48963c4cff45088580bf61aaf42ff955646fa67be |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c2dc0d9fcf2156699158637f0725e11564ea579bbbc6a36e2142f1aaa90afd4 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f7ac811b030bd5f461390fdb0fb6e15b6659e8421bf0a022b9ab27c46cfe9dfd |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4c5a981fd08af319009a5812bdaab5842f6b2891ee260544fd683998b5cff2a4 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b60c7c11bf5fada3a113268d741aeec6b819dcd72d648eea4eb86f6e85366b26 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7b843bd74cbba3729ff297c53babee5d798b8a22cffbff9b6cbcb26f6d43cd72 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:54e24d0bf4abf6317184bf78f05ee8c8ac9eb52777e5461a230623efe7ca5275 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f7f7076ba24a2054f0fc963b84f5c35b81901d4f0f759f9900472192415a035 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2ad9dd664ee56e28833b0621ade335a7ad452ffd0e3c2cda8c1bfb938337b32f |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b03a3af84a84ebca4d7ec528c9a4f07b41077f6c3e6ed94c64e888c7785378f1 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c82d8048e0a77cde462ab5ce9a29dc7d7cf06638e9e79fc04eba95327a5b26ae |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7e895443e549231dd8e95c018779c4d957a0c3540261befe7a1253038071eb0f |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:6354db9e9549dbafb4242730bc761970a32872cb4e4900190326b531f380deca |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:473c54d14676c68ffc77711b7c47aef154c166dd824aec1d4661116b949f17bb |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:0df4f5d918458fcb59bd8d13d2ee2bf9f3730393c57d7069b4df7df8f8d91d6a |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:81721e6fd31bf9dfac186d9a400eb2d283e9e0ed822e0c0ff7c49bdfeb63649d |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c5a00a95e387219f1deb8678cf66999f9d432b92b11ea580a8e0f9d62ce9ae2a |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:3fd3ec862414ecd0a916bfe4b2e2eb8f9335909913a71b092613d1a828b2dc38 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1253651abe95fddcec7ae2aebf01a08b1aaa6fc1c72e1981ab9f779eecf5a97b |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a0bda12c0c39aad7079cc06fbb3e3a130144534d5a389c7eb2be84b04594f48d |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:d25dbf90075b462546af7f97d17fe8d4a82b0f149d8dfb9c4680ff7ed7da10cb |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c773b1ff7d46ae93af5f0107e9aaa5553ad8c2969cf5fae697606e8ba4413161 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:919543b8e5dff86dcfc09e510d395d731faceac165ac414f2ef2142e8c2afaca |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a715dc56d04a6f09b35519641c209c84b1c926d24cd43d54716e7321254571be |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2b87874e7e95b2c87becc1f89e6a969927cf7077d9c738f8a3da5b422a81bf8b |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7177391f7275d140c5a2da3793e52f9f06548da004759b27aa667803d6959eb |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:d935bd9d2f36a439d2e43b294cb396d4001edb6a0f170cfe82f38bbbaf0a3975 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:466ac487359a228df40d187581ae3733f4417a8720ca3e91a0ee17853ccfc873 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1074625636a1d801b949d1b29822752eb4599cc62a4162170e3820d75a02ba45 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:02c6dcbf817d479fba695e59e5f0588c7fce19c723f7a1e079a9dbaa530d52cb |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e6cad0e543e3e5115163d31036adb9e172f45ed49933ae05710c5b880b198f8a |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:aabc90eda5fedee93414f29a6fac145ac83900a036e6b0a5c4d2225ad918af0c |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:72927704827b7908aa73b8b8d5c7a9bf67668575d446939bac10be75cea8cd68 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:459ae22d11af87a6c7b86484d20d29bea5c549636c4dea3926962fbc453f28d3 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fb12f654f22b5881305deadfc2e9439cccff67c2c375883680990fc51709a0ae |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7a0591b599284e447cf703b0ec6c7959e6c5c957f8d0870fe655fb0645a445b8 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1dceb30882e8dc4f735686bee3332f3d4ebdfc77b1c286c5452d18d3e05bec0a |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c3901e276e04840bc424bcb94a0e4f3ad4237d24d368646cabd75ef29801af7c |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:892a1525bad31029f4468f0a70f8b4dfeaad98ab6371450a6e7143aad57a95f8 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a42beb19b7f366dc435640eb00e15a3c4d654e11c3d2bebe3cb2d575caa2e068 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d95d2031e29df29acf165ce1c1d943298f7cdce1ae64a3ce828c74e33cd41fb9 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:55d859fc1c180fc132d682cea34fd7f43899dd380778efa42f9957327641592b |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:7effba338ce3ac12d01a17c068e5d4db19befbd343f250f691416ea38c70b992 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:5c1258722de28107a118823d1b592c747ae1ab0ff6c3177eca856ac5e150036f |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d197e24ff2085f38d83541c5ada8ad8bf4e5dcac43cf2fa3eb80bb0eb0bc653c |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:068bbbc2bbec404248810b7cf4fbc2f86325e530945d36a41f588742e5b5a8ca |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6e5f49a9f2091931df4be2d422cc758548995d6ff0c9251076a07b74dfd3f79b |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:313396e8399e6e000bd79d7d51277d2862be63cc306af940de674d52119e97e1 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e2039103b266c29038d9fad91f8853b278102a9f55ac232d1e17138c8b303b4c |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:473ac52698ec84915457ec862c3f274498752151f3e651662e86187186038345 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:57e6a80e16ac28843addcb9eccf6b52f5740d0e91d44d2e504eae1f825f84ac3 |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:51660739042f40f3b605e3ec8cabca079531e594840c58ef1e68488f02daae50 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:24fbc8f867f364157ba75c3e185c48aba6a2f4d95c970b48391cfbc4718b2b12 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1f7829a7db6cf88c47109bb88a988e9426a460b818b412b367cb5466c3fa1a61 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c88bb08c4f3c381cbc566b04b46c13f1e9e4eb9be75b30372aee5cf65c6e7549 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f662b1155fda28d3fd3081d0ef49ec707a538e208953460dd14097bb79455ea5 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:a5247449bfb03f65147ec30d6694851925038820c9f65fb2d121df4e19f138af |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e437b4dccab913b24a015081d7a4a8a94d03a407e58dce97f518f56fd003f92b |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:79f5d549ed3919d9916d80c7a4d4240dc26e0876711d05e55a6bced22a42b7e0 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:93eab8f6d49a40667beaf65958382137aa6348b5e6d38d1f575b09dfde2c6648 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:cdbbebb6acb3a120bd5fe58eb4bbd0018e553d61080e21e94379a1e1128c58cf |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:919003d8a1291fba172d9d961a4429cacdcb9f2f598a2944ab5d798c0883d915 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d8544d75d0806bfad40c6bd05c41d0c0bc783b16eb67954fc7f214820861f614 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:232b993641d1a7e8d5a00498d9511ad419c18d467cb8b3088bdec9369df6866b |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a6fb27e4679ae00c60bffcc4bef23af937fa13920b363b2401abe8b62a337799 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a3d80acaeb45670e20e2e05e7f62f9d72890e70e5806b876f4def4690e7470c4 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:cf92f9c8345e28e22c89373f0a22b33486fa9bb87276e1baba19ddc1ca5dfddb |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:8ebed14b1ee2624212269448459932f94e6e37087732fdadb0642db50f7382ab |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:9d85489b42dd6db5521018502d77f13eb6170892b87ad2fcd08da4fc76f35119 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b4eaf385e23114bd3dc6b33f46da69114a0a076e5fe09c5ba4948cf08c54a842 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3742e25f18ce3526fa7cb58bab2186cbdf116562b549dc8df5148c5396d75618 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:f301b26bb01fe9dc6b492445c066f6a542462d1be736a0c01c492b79119b315f |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e57d3eaf392357fc458a1c9e85507f904bb539ada337dce4e299b92e1f4888d1 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:02ca45c5cca4331bc71c088b896fcccb249eaee7969e4b7bf6d518543d054bdb |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:e2f8f189ad22ade636a864846057a00c45a42c1109209e9db0ba6fa0327625b6 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:026b3dfdc59bc6cab91910effa5b3f7b689c0647fde7b365b68cd2c9e79b3b83 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1c6da94beffff52fc4016f2ecfde94cd1e3ede1696c8e6c0cf03992d38941dfd |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:553be40de5d2128908d101d1c029e6a5595d3288e5633163df2b0a526290bde9 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d7ec61a12da918f2b2764f18582311c553f42bc706be5ab84d47b12c353ccfe7 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6478ab2126a7fa603fd94adb27e37f192f909b0c7acba95531f58f8b6a04476a |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:fdd5345259bceb524915f45072e8f83dc983447546e330c42d438ce9af874998 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
