- Issued:
- 2026-09-28
- Updated:
- 2026-09-28
RHSA-2026:72851 - Security Advisory
Synopsis
Important: multicluster engine for Kubernetes v2.9.8 security update
Type/Severity
Security Advisory: Important
Topic
Red Hat multicluster engine for Kubernetes v2.9 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Description
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Affected Products
- multicluster engine for Kubernetes
Fixes
(none)CVEs
amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:bf66ea4c38039411444125a6b55315b13b41ed47c9d525302975bd3d8f855647 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c265137f5119d805759b542efdc6b9cb08ce48cdc4c4f830a1ea383145f18667 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6f65ad79a0f5d2de5008e50507318be5334e5cc52a7b3f1764762c21947eeafb |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1713f6e512989217a3ff46178816b7cc8660b88fd651630ce9dd60c5e754cd1d |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:5d65473211f82fa88f1228c57ddee5e5efed9ab6b11a7f444d85c8aee0a0cc06 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5f161f35286baa8af600a24840774addff0544b72a3af7a6f67475653cac27bd |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:c8284da185fae0dd7b69944d72a076f41b945dd3d250d220a60b4412e1c29ecb |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:92044fc87068c5758829b39f21cfb1148c15c105aeb212f49a35abe9aee5530d |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:79c771c2ed8aaab144cde8c8424ae4a84d374cc59c94feed4bd0b3a66356cc54 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:860feb93c004fc641e34ff359143615b884bb877fac807a917d569cf32746e88 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3592c77be9362183f1414998bce515683c7dc49c724eaf814b8da9b069d545d5 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:eba646f845788cd890c767a7c3ec7111adf7d58e9f8f8a7ea3ad993f4fcbeefd |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:56f150aaf4cec5033dc357fa94e54dfe70e30428d1368484416e1ae030bd7bc7 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:d8630ea10bcbb6ee368cd31273116acf105d84543e0caacb67d95e58ebed9aa9 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:e25a8cf699de55aafdc6b644bc4c1b3405abdff5b669509d990f449ad17b1f51 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:aeb7e2065f5330e34c958d094e828cc6826f43941cb3c4ce68ef19e7ed31727e |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ff00d5536a9b47d6cad845155a962239f6fbd40bdb199ccfef8435194c1d83df |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:ac7f50b37c8d8b97b08fc595d623fcc3dd4cf6984959ccd22303a381e1db1680 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:91d2e4b68f4d91c5ac9d64062e8bf520c25dddab3d809bea62871681cb291ea0 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:edb7fb57ec99a4b18b958bcfbc8fc5fe3e749af5d8a7dd9b6548c6c2c037dc83 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d70990b9a20af1fcd0090a7c1ae9b0c1d9e05b86efba40dc047e2654919106ae |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9cb7f644b351fefbf3f4b50e8c27d85c01b1afad75738c26c3ebad8724c7d4ce |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:29e6c56cc65962a4eab298e05a38f41d79fd1c12bea4900c3b0a7c31638b09d2 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d967a0c9d282d9ecbce5adf97d89f855307bc98e9947c458b0006d6f1caeaf08 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3942350fc0771a482699fab549f3ef5a4ae583c2020944023808fad637e3b98b |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e69eb8d1dbd355d4e41f546ee8965fc4a467f36831a62a4e988bab2712c0108e |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:2f4c6b1694957c5fe2bce19645308587a0e38ebca2284954d2eef06d54cdb419 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1c175429c0621469aad58d413128a5e42ecbb87d4f5008ae285cc87534cc70b8 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9aa693560f9c705648ba79ab817b1497902e6b74b936594c1e3b26b98c484fa6 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:6020070609f64c69cbff3641d83b84397ac4438a1b0039d17920b986dbe687ed |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6628101e37ac81a9af9441b896e53bf931c84082c8f783a8542130e7c2ad437d |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9b33c230dd055be8379b29973b3ddbef0d5d109151374339e45d1bcaadbc8a8c |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a628c921b704cda8f3c2784abfb38d784b024bb985b70b5a082a2d6a08c0e0b4 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a75ed15cc22db70549f6e9d67fd208e0e3fa2b66f51b7c978f04dc425bbce2ad |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0b097c5962c8368279a30203a91dfd581024c16987c4c77b0c14cbedbd347801 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:c871b387e3feb7a235c42a03856f2e0dedc7c6fba905c34f4574ffafea4f310d |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:edacc49c36bd33709d3538bf724768a9963da540e556accf9806c629be56e779 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:93f03d072f91ad5c015e52c2c38951cc1b3099c69e173ebd684f9c5b53570ada |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:86518cf2f5efc7eda54a2d062d51eabbc647caf7674d7ed678f949bf2e44dc26 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1a2d44523594387bd57d89fdd6a33ee901e2134fa036cbb2cda46d92cb2c0a74 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e0e64879f254f76fb8e7f5fb7ac4e8ff7ad89915b2ff8e8e7c623fbbf95ce1a |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f7d3aaae14f714861b399ff497ffcab5b5fccbcd345d0ead7cce15717933fdc2 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:30d99e272d309d5c7ed7b34e75fadef68d38ff66e422712465893d3bc5ce9bb0 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:833f56ec9813a05371f8cd4160feb118207434b6fc7b99b63ddf533ece1c2f17 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:36d052636311d3ab4bb4c0938ae667184eaa4df765c4df1b855374a21b1537b2 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:fde1b0969874503bd3c6766eccf8dc8558cc76414bfde7249719d8ed0171ae04 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2159183838302719e2828518f5a5166e43736e0fff341e826f447df49f5abb10 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:226b913b03cba118e512a2ad26b7b39e11d7660dd8800c07f018a390b023f588 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d74c4b52a13a2d692e45b8b20ca4916ffe102c3b75605c89dd2ad96378897fed |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:48142a8ed29281534b5837560362ed416b30827d5cf7d981d4ddb54d76a765b9 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:62ba6476815f9a622db66acbc97ed7fd06ac91bd2f01b2646c4f0828257c6971 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:479c8da2d368eaf1349a912f7d127d40e5741ed7827965a8ae62dd58934b5ab6 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23d829e1249ee8cfa6da32663f15502b81a3bec4da800e7a4ba74882da07cc77 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:8031d23107a7460a6a22eab07cbb5760980be51bd122e03bb3088a604c454fb6 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:fd1077078fcb56e23bda2498d22fb332c7b633a5507833ee3d5e8808a0a46496 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:d4093e69581170684cbfd8e6087b64f648e083e818419c52b3d43de7222245b6 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9038ab55e2e2eb3c96b031beae7692b2bf09e58437fd05df15c24754524aaeb8 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:273f90cdfb0ddbc64a93b20946b628a8340262b0831e82e8bc1c39ff566e55d1 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5b9270125df8600e1c872bc12d019d235d777422b7cf99e3acdfc74e37e5a4ad |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:3ec4488183db4c6219db1328aba0f47c856857a01ea5ab551327ba0a2c6bf437 |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c646f2a99ed436a478a28a12e5e29e8efc105ff4e04da65a43eac261f4fa30e1 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c2f7472a151df42f9e2ef5ac4f015105d540eff7a0a517b2177627c6e65dd825 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f92cf1f99652bacfee9358bf38db1b7bb33b1453eae98751a2f0efbd05cdf60b |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:496bb23156f44e7b961552daca393f4c8107368d6ee4a9042182017731689568 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72f4b1c0ccf15807fb3931ce56efea002f9612887ddab844a0d58e9de3b822ad |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:1d08f94f0efb5b19c8dcd2227fceef012ef318039bdb7a323ebc32fddd536000 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:ee33c966652ffff57da40ecfb567367285f0cd26ba7f40c2cfa2b0c633f76704 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:addecbd0e33e06247db0f37a493ae6ff3686df54d9cd0ebdb75d61c14d00a008 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0b346b41e6eb7fda286ff5b994d9629577d9a54b2399952613e806d2e4178528 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:250f810fa8b324640c96fb09ee53b6ccaf7dbc8cfc95ec742abc746326a956f0 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e6050932f1d0e0973eac62cb13da021135adb52990bcfa17d3dda7ed5c91da1f |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:3d7120b9bb6e06111284f479d9b332a4c53f7af29b7d99e59866062c1cc7d1aa |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a4832e777b4be366999289c488b2e5d1e9828e274ee50e935484c60072e5ac30 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:795915547e37be93b26250857e0557602173122e7bac56f97b74c28f16af45cb |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:be263efd9634d794338f9c1d5506301cf35ec50d3ca62cc9bc4578bd2ba48741 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5ec7a18e0a3d8c0e9fa01f215513c595ba57a8f10915e1396d9a3dfd724765e |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:11e4e6062e71e0cbb90058afcd95cdd5424020ddcd66836f20a28ef6e280917d |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a40e3f0e741946f1f989b8f7bbfac5e75328889265b0c4a8273f7294c7a446fe |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a969dc59ea6b62953cce1ea8ffd5b3e2fdde96b10783c24360f8bd526213a407 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8b6d7a8ef0a8636e84c3a0709b5f73557fc48cc28bdd14a0b0ca7b592fd6bc56 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8d5f1f41bfa32221e958a8a68e3866c704f78540903107bee68f12977fd482e4 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:7c226ec3223922c92e7e725bcbc8e0454dc98e8132cecb95936351d23a2295e7 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08938f1df749fd333aec891224eec73a8bc415fedc63df730e3d5a155ef3715b |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5525b99c29d02804178184bb6ab423eef8e071ec9cc3b8d43e38d9a929cb3741 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dc9746d5cd378e5cd3e4189febbab523789ba77a3e8902c462fcb8d66e968316 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5755fb7b1d1f602fce69be93d515f7f384d3da9ce515c7023a3368a08fa15096 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:2ea8bd0f72a26f94f25f6b37193220ac42f8bc54172790ec885f42dcccc133c3 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cb72a27c23d11913d5ff60b497b66c7f0a3f8fecedf2cffba54c23877eb6e619 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:77806832f99640a73247d40727a91a4c077445902e37780ae26fd6ce3ce3b767 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:7e0738391066dcf4ae326529480f02fc2151c78885b98d3da9b9a4c3e3880fe9 |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:057fd34d241f2cd9344227dc85cfc85776c63db54c315b4f1aca56f3ceda4645 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d75bb1f196ea5f39cba1908131d3a60afc3f087096fb6f38826a319500b12f9 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:b74b42109558ba235b6482a6c829d8c283fe25f9dde2b7b57a695fc1077bf3c2 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:3ac529257f1b8e01c13e802b3c90f52b0c783b59431e7c7a87d53d1acfb51605 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:b8286f1b14391e2dacd0ed3db50e480a643440a871ad454d1eea13637584e16d |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:ee2259875a44383bb4ec730d743787286e9343b2ad29edb6b23854bf26fbaa84 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:040c9dcd35c9f92f2a07b8812819ad40e3e7e93c07668ade9f73dd006fec2006 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:b7c04de412252db133e7f9fa21144f56af4fe13a7348390b0bfc281d9b400320 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:e4e1c2f7626ddf2cfe32667fdbf396c380e67d3ceb40c6bdc03fc50eda715fa6 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9ecf1639d39b7ca3d2cdef3569a1844b2546e6f1545031ad1aa88f7ef43b2e36 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8de03ced28a1a2c6ef748c42adcf9b0dd5098120bb234cc90620d6fe19149503 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ccaab237e7df5221439c4b223f7f8cd3cf70dca56191de0178332a3e6a58aecc |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3809915d163229c2c3967b5f4ed17ebc0166e9d3fcfaa3f7eada3db305366dda |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0d310d706d535568ba53de8026cb872d34cf0e4ff492c8ef7e172fe1a0d67c3c |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:daf3808b3deb4bf8e4ea1aed483cd58b15a301d334d4011a18a4e610520c9981 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:aa10cf976bb9c5ecb41846a5d53add4587a7ac74059cdd4a5933d4aea8dc69e8 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc7d3f60078fb731f416c281bb276db86bbc9bb6d4e90c84cf9938805512544 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:778cc8b0f2827cfbe9c5960605e1c25f20718691a09d2c31d16e9016147673cd |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:bca80e1b258867f040036552bfb549da527d79521a748c28eb1580ff1640f281 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:96a2edf880ce2997f620eb0535b03511c36a70115de5ae1fbd464982c6faac38 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:832b3ca54796a02c9b07fb4608b4c6c455c48c9b38dffb0da34c44dd3fc826aa |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:10df8ba69d623509db4432e5ce368bdc6f3864f4cf7a72e68a1244863769dd2f |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ce1229f0c14bb11a51afd9ff99a385ec768ffbfa743340a51bfe63bc9e9cafbb |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:1fa60ede3025accfeca9c2bf5aa9a567c0870b00badcaf735e3997dd835e8cda |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6c1af0a929e905e54a3368d9fa50945541618a3e3a2e781f50c3ebea4dca9bb0 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:65a4cb7406db6446b507956bb37a9b0f38340b884ab253801fcf50acb88b9e18 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ddf8b1e8c86cf43c2b3184cef52f25b2013be99443f8cc31ea9369f58a225755 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8dbd37aa189e282f70ef50ed1d528b013e73bd30c9a5cd1d5bb0fd195117d41b |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8e759c02cee5723c7e6a1bb59e7d0ff3ac396e0be6a1342f2d2744d173068483 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:147416aac39b6b644b4561766ef94b548d8436f802b3e262bd22002a8c7dd3d7 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
