- Issued:
- 2026-11-09
- Updated:
- 2026-11-09
RHSA-2026:96629 - Security Advisory
Synopsis
Red Hat multicluster engine for Kubernetes - 2.17.4
Type/Severity
Security Advisory: Important
Topic
Red Hat multicluster engine for Kubernetes v2.17.4 general availability release images, which provide security fixes, bug fixes, and updated container images.
Description
The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds.
You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for details on how to install the images:
Affected Products
- multicluster engine for Kubernetes
Fixes
- BZ - 2480676
- BZ - 2480756
- BZ - 2480757
- BZ - 2480761
- BZ - 2480762
- BZ - 2484830
- BZ - 2498152
- BZ - 2515815
- BZ - 2515820
- BZ - 2515827
- BZ - 2515830
- BZ - 2515836
- BZ - 2515838
- BZ - 2515839
- BZ - 2515840
- BZ - 2526955
- BZ - 2527118
- BZ - 2527747
- BZ - 2527756
- BZ - 2531587
- BZ - 2533175
- BZ - 2538111
- BZ - 2543236
- BZ - 2547112
- BZ - 2547120
- ACM-40348 - Cluster Proxy Addon Overloaded Causing UI Instability in Fleet Virtualization
- ACM-43030 - MCE cluster-proxy agent silently loses tunnel to one of two proxy-server replicas and never reconnects (dial timeout, backstop)
CVEs
- CVE-2026-106445
- CVE-2026-106446
- CVE-2026-25681
- CVE-2026-27136
- CVE-2026-33818
- CVE-2026-39821
- CVE-2026-39822
- CVE-2026-39834
- CVE-2026-41178
- CVE-2026-42502
- CVE-2026-56853
- CVE-2026-56858
- CVE-2026-56859
- CVE-2026-56860
- CVE-2026-56862
- CVE-2026-56864
- CVE-2026-56865
- CVE-2026-63209
- CVE-2026-84292
- CVE-2026-84304
- CVE-2026-84375
- CVE-2026-84394
- CVE-2026-84445
- CVE-2026-88031
- CVE-2026-93748
amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:514238b3d00d832c7b154d88700df02b3b69da1186c9565d3f294a3b1122136a |
| registry.redhat.io/multicluster-engine/azure-service-operator-rhel9@sha256:3e0b680cc36aa8e15c68e33a10bfc26c31d424f0655bf8ff3f0be46503cb363c |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6b02eaa95b24b29704a53347e5b7fb7edb260b39f8ba9b06442963bbfa7fcdcf |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1616df38b8713b9625abacd85956d8e2ba740d30a216a0c21dd6338d16850105 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:ce5416813ff6279b25b4504de1157eadd91a08ad51f3ba23f4245a4ba81aff2f |
| registry.redhat.io/multicluster-engine/cluster-api-provider-azure-rhel9@sha256:48d9a275d26c95a04ae6529a5cd0c4f2fb283465e548fd0c608e5babd0c70038 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2a19e692add872c15b7fb36fda922cbfca383bdd60f63ad8cdb11acbf8710ff4 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3eea324245712539400c1d7383a820caa22e872d066376022b3ca762e6e8da8c |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:cab802c5080e5eac29c9dc83196830e5968003db267a31e2d50dc0cbed21dc96 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0338740a891be6a3c4855cf1bb8a6f7b5d3ff6d6198068dec26db54428e9ac08 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:e3c94e0d3326fd15cb8b7421809f04e56b59ec06a6b9503f97f2af906e753d4a |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a45d9caf45bf6f4076fe0f0febfc5e1159c8437dbb521be348badccbc6be04ed |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d6e8c9ea3e18b51fbdbaff613395a2827a5ee20dc21f0936cce49f400561f8f2 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:16c13370edc5787acbe3a332a728362bc97b2ab666c1a2bf987e952a5194543c |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ac2969274d3d0dd603a40be3184444a32e5b84aa60537e4cbc1b28990d62a0a0 |
| registry.redhat.io/multicluster-engine/mce-operator-bundle@sha256:05c1dd20b505d48a4f4f788bf3819de141b24dc35c42f7702a1c474bbddd8161 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:cf1715267473a963682ab2a436d4e08f683bec7e6c0df0a61bb9680545ed1285 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:60c837ac66e66df2ed23b0af8896417134ce76810f71b438b62f6390749e3cf7 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6e4a22d10c8b5cf71ea1201d3499540b85237a516d4eba2d545aa4a3c666cb30 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67d8261693a559e217c88153a8cc738361da3bf9373ebacf613b693eea197a3a |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7fa638eeca0ba9f0d7766f78991ac58c5c73455ed2bc23d3d503f85adb3eda5 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:b21cdc4e8f575fd39249c6419707618b2789f0b15d129261814b45823dfd7c2a |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8dc749aa71da35422f18240fdada9b2c3e05c87e697e41e7c4a7722d0a34f6bd |
| registry.redhat.io/multicluster-engine/azure-service-operator-rhel9@sha256:8f3b3e12e3613811fc46b5a305f204d2f84bd9ec43d2014bc9ac32c6d544a09c |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3404e415141f46232de8888b63e3e8d0115b664a41f091aa8a0e12f5dfbf4578 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1f496c50bcd0b178c70d6517af768aea83f79ff1b7eb5c565495eee884f4b1ff |
| registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:b4c58ebce847ee6f5b3afd9c14ee8ed475f4e9eecb8603d857dd7904b066fecd |
| registry.redhat.io/multicluster-engine/cluster-api-provider-azure-rhel9@sha256:6f38ad39d26b4de32ab3ca35f1c23ed9bc5d6fe14ebfe5a6464a7d6cf911d869 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ffd8f34e2adecf357d15008fb461cdfa0eb10040e2495252074d4f531d1a66c5 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8420c6af46d317f0af80e6a6a33c7838b9e80119a22f90c412d90bcc6c0f1eff |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:449f241ae826a51661f141b113fad9d35df5da8ebe7f69fa46cedcc6e24acb3a |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:21855984d032c02e12b14432b1d50204e2ae2b94b91ed2635d03f1170a17b1fe |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6c57b43800be456565514872ca300fccb20111ad0b3c8141e00a40ec89f464ac |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:dd8afeb247388dd9602498430666f66602e929737a3b5750014723e3ba25bbca |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:36f03f936911697cc479d9e150e6d31821edb76dd52d0723d0f08c0c34122b6f |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:4b6a2cea963f32217cacd5eb6788edd1059333b85a4802f95f01213347979b4a |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a7f7f99669396fb31cbe96c3bee88d6f6c57af35557c7f27fde36b0c31bdb712 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:eacaed0f1ed1ecbdc4b8e2d47b548d6ccc58b20d3c2dd0f33afc00e7bbb88490 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:16e4b9c5717dd4eb51e44988b53e69b1fae41d3db2d7e286c891dca1a32bb2f8 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4ca0f066d881a904d7f14402efabd94ae27cd8d32fdd289744f6d40215e585f6 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3c4d7eb6ae05922e0ecb12821869ab39dcaa1779ef32a249dc751611b70bd57c |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:97d77b7282ef2fd5d7485c83c219437997e667c0834c63797de8288f84d8f348 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:a626b3c875c638d04183c9db01e076bc925f33a2058b635410e683ecd449b7b1 |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:58e46ecf7c755af6646848c25d38f30812e639c7bd3b6e1d4dace9454c73bf4b |
| registry.redhat.io/multicluster-engine/azure-service-operator-rhel9@sha256:48c0ebefd09b5c21734b504fadc3c92889d70782c443fe1f0717b30d77f9255b |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:03196712d54ac5905f2ff2a121179fda6208d688e61cad314bfdb8bd85c73394 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:833636cbac96502e7351d7a6bf2b4d2f8b28f762a16fe75ca9fa4c5aa2521eac |
| registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c2d91e446d119e872175acb7a2d04ebfa3ea927936398464ada0472a2aadfbe6 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-azure-rhel9@sha256:569f666d6a57a1820c8f063cfbd3adf792503a0a0a14f0035d9cd759aa80d7d0 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:a251c86fcd2fcc76d50ab64af2c0ab2c42d482b32c2a9a806e9be948f8f041d5 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:84c72750f5fe4b6be8bd91f74632b340a3e831758c9545c792bf63cf1c92555c |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:865db3784827fac9d08c794a1378d890c43d1c3a347f5fcd95aeb5ee12a70a3e |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5223b0862dde07bf473224b822256a85363415c0f48d707d64b0e7953cbac054 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a7e257447f4eabf5e0a6cd3cdaff7287ffd7d036673f86db3843be650364e7e3 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:ac7daddf111e8c31883f0b7c45f1de0db9c19b95cee303486fd418cde09b1164 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d176f46b2ce8b81af36dade50335f79df27c8c5ecdf71141849d56ada6854897 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:edb240e5737c1cb0ee0de838844708391769306bf352c061ee7c3c16c01debca |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:8638964c524344e07744dae47e9aa80a662382d7e502ef56a22747f7599b54d5 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2d2ac5d29aecadeae50f10871133aad0719b82cb361bdea92349b4047ce5d800 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:d9fb68a92474da6a257cf8ba23821bc13cbd5d3902e29de2f1798bb31a9a05f1 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fa5b4fa884cfaef458e819e05eec0a8aeeeb8c7b553e8ad295618a3c3c125a55 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c8be89b9c935a15aae277ced9440270a098d8751deed33463f58072cf76fad43 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ccac02068259ae68bfb799d51238c47a0e2760d0b80d876f7a8c97d5dcfb6e4 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:37d559b949478944a7c296cd2b8af7e3305c5e0ed814463414957140895e2196 |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5c8d99ed82e6c1f8c0001f742980ce0423980ff98f7fa84d0dbf49377cf5d4fb |
| registry.redhat.io/multicluster-engine/azure-service-operator-rhel9@sha256:1514ae4f7061bf84df707afe8e250c0cfc3bede3fda73e759976372b962b524f |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d0314ab48402eeea0cd78df56596763e6415c4739fa36c4399e2505bfa4c0cd3 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5b11da4b24eb04236bd8050398ccae1ef2de703ee20b25e6dac2e81ca0d20e90 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:299fd714c8499ae0ebe52edb9522686a80ec3087c4404ec6f5ceb81bd8acf70c |
| registry.redhat.io/multicluster-engine/cluster-api-provider-azure-rhel9@sha256:881123ab3d66b70344e73c69689a9e72d197710ca19ce761507a006ad32e7351 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:59ab69faff9b9f3387571122960964783e3f96756b4c35657deab856f481e726 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3b9b7f5795148df7eeca1dffc492fe236015ff60ab392ed15f7a95cfec83bcf6 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5b5f55f2cd5b7a7a9f4cf27c3119ad9203776b150cd6bf2b37597b95edad52c2 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:d45349365935d330bba2c75ede5af3f8683e7a2bee54241c53923ed45cbe6d70 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0e33f5e1e48e46b374a2e4bcf31c1118417a348bdb43bece6df7faa4d6adfbc0 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:eb5f2158debf9da27c2063f2e4d11e74d5ac0615023b1f4bb4bdb97921970c39 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0e8fa0a2d47b76a314b129f2b915de950d68542883878fe58aee8dc849c44564 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9cba916739879e95e0c7fb05f4d87bb7cf114bfb53ba978be2c5df9f2cec24e5 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a540fd7150070ff5a2ea36241de5fb6d2bdcb0e3eaf29e80d7279e46ffaca6c9 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:84a52a8bc16abc9d6a888970adaa57208d1f761ebd15a039ebbd776c3a7be1e5 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:12f8969a59ff5e5ec168fb6cea3063ad4eaa51c1d4c81ecaed8a8a53b5b24fb0 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d5c9e31e2cac4398deb8ad37d2e62b2d47555c41d9b68e02bf5c70ddd7693442 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:fb3c8d1621dad113fea02b24bfa98c71157655685a798994564707d50834fea7 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:54253365c5e8eb02a28325d3ae4ae736256cbfcf01081271fb2b27d3d61e0b72 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:bab2ff2467d8a7097df1ef4e4c3f0ca61c7a2c3515edf3a8993347e4d744cb71 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
