- Issued:
- 2026-11-12
- Updated:
- 2026-11-12
RHSA-2026:99958 - Security Advisory
Synopsis
Important: multicluster engine for Kubernetes v2.9.9 security update
Type/Severity
Security Advisory: Important
Topic
Red Hat multicluster engine for Kubernetes v2.9 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Description
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Affected Products
- multicluster engine for Kubernetes
Fixes
(none)CVEs
amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:108b4e4ad3178cd3808ea999330c8ba6c0f6759e33ed6bf704d668a12b5ea0b3 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:fec152f36a739f494cfb39b164e06b5b742021c8d25ee3cadf3d65c1eecf4d0e |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:dc9dd7f1cf0d7549c738d02f66e45355f6714106358bc00341087cfc4adb3428 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:6cd4051bf27c14e33481e056b720f27fbd0e6ab9ecace8e85a16d0bc06a77c02 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:1c1dd5395230dbf67a249f3cd57cb769d374ab273abd5333bd4342f68209668b |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:1f641ae2341cb47b2bb3e381ee56aa3bb3a7b5c857221454b8e6cd20cc56b0cb |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3d199737c979e4a41807a083209789e7e26f8276f2cbae473a397d4f2455e41c |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:b8212c59f097e24c499feaf9931b88a6ee2bb8575e3822ad451fb077de515342 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1ba61eb26441a9361369da64b085663893268a86a11a72708a8ffb9d06adfa3b |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0a409694a8275b3293944f8f7c1d0a75c3795c23fc6ba8fea145e797379444f5 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:b6decb0b3fd2d9b20248a7189b9ec00ba93b5f91cd3fcbebbdcd9dc43549780b |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7cd6482d7a0084650e966a90f1a7c47799266c5833ca46a1fa8800d55b535d7c |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d1207ade6b5eb3c2e17ef1c71ce32c0c276868dea8a09bd9a9d86039651fd0a4 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1fce83fbf012712a1a2ba9b53f7082215fb6a6c30a2cb572aeafc4586328fae6 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:1e433d2618e3fe1da013dd7afa65760fff2a23c29e781f9e06014bd799e0f6fa |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d28ab1ea33ca5407b5f3f21c52d5bc6349d74321828486393ea2a14563f501e8 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:16ed6742aa20fe0b08f0f07343a2ddea9fbc2b95a342ca2f0a8052d53abda083 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:adf58a5ae79a31d8c1b0692c0814eb50e8994ace69c6ddad1a7d3f4c0fa96d28 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:7a7487ddb0ea4a2155bdb176f3a04f8021f62e8a0b1e148c103c99d9ed8e1462 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a39459e9f4d7241c16a4497ec74ec2f3fe4994f38beca4166b8def7adaf3209c |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bd2987b03ea46e7cd8446e5387cb8dfeb7b825060ca93178913d110480e17a3b |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e637c019e57e400665a6ddc3e7152dae57b9450f1accef89418ccd300722dac1 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4391390cb278465acf55a4688be8455c3eeac76d49573a9d18d5b8a71cda0545 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:74540ba016685462669edd3b22e600e35269a0047444fbb8b5dd0f80e15d577f |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:771b89818496efa50a50691ee8d732e110614d5993d2c7f3703ec90c21faa25e |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:580f42578322c2f7ae14062af4d1440eadaed15e6546670a380657b3b0ec9b0f |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d5fe16ed46f6545948d2834fccfeb58a4b99a97c1ea466cfe3fc87158b7ccbf2 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e5bb928cbca31b5e5a68122c1d793fc2aa04ed2b7fba73c6f6821f0c2c36590e |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:889cafa434f4f82a1929121e8312187418e3aed8fdd17b62d4eb5117b68ca72c |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:e913530d5a83b00b53c632ea6dd9836105496c6aeeee4b8777508075d523ea7e |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:ddbe4eaf082124b821bf084f1c5db63e59b93a5e84621947ded7a9ec40c49c75 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:87bb68411f424a208ec1622ee170398f7b086749ed6c4591d93e2d8c2e8120e2 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1d6a46dd128904a078aa685268a86d4b74ee3343e669beb610ee4302b6857075 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:defed9c3a4ffa9c4b092a56a9f9d6eb1dc318ab67ae9a4f8403969dad55c9e93 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:702a3e26dd8f514e68ffcfd199a4e7b5301fa27b0f787cf05d392eb23d25c828 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:12361ab0450844d7efeecfe72b0773317d15e8937fdb832837d39cc85316f434 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:2cf305e559c5ebb45686a806d541d9a92e78ccaca8989361e897f90b2871eab1 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:86eec8bdb280f57982277bc27cbbdc19a42b1b87e8ac7e03e4659b0bfbd736a5 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1bb7d8c46d200c8fb6eee2371990b577ef06fead2874aee4f867393545ecda64 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fd8626eb878806ce575dece538e28adad048c07df94a2f04bf412ce9feb9fcc |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:fdda02eca1de28522ff6b266589654a7765f87bb5e36f413245e815a4361284b |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:658af014e4c10ae6023cc736f5f68af008c03ad9c659018c311d25ff3a046e95 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:419047029c596439183b7fd49cff0050152eb798b6daef7a81fde3659ea3aafb |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:2074d93528eaceb91f9d5de8a3ef87f0fc2827b91337337f6a8ab2906793618b |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9a93985a2cc92e7e1f43b841f86c8cc3d0dd8a704e83f4dfe06c2720c3aeeba3 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4879d5befe60d3f77b865bf5221ef98f0772d658ccc17378cde6c321f47dd7c2 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:871eb95c60fcdc7b239dc1c5cc4a3204ba0e583cbfd0e456f64c75ca5e970d95 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2066c20c4c4d576e0e06746340f7d1655a6da7b3f93993cdcd937e1e801f3e9a |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49cb2001dbb59cd5c5a1740627badd6197964c5ed6bfd24fc2fef4b369ec3a12 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f01e760c504a6782e0e8d0edc61bc9deda7425899851866b00fb88d46b18767 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:a52cef1c79d571d16be40e69a620fab42dc9a5900abc8b081da589d848dc44cc |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:0d9c41ae09c98410a378e4dcf1f49d27c333426372bda3af5285c2ca2552933e |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fa5c5cdb3481877b5d33a69c587a3fb229ecafa7878f290206d0af77759cfd43 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c7d40d3abaf0552f7f5a0f09f566ba4cba8f1b3f6c3f4bc8b263fa52016fe02c |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:8e9cb1fe5bf395d136b9d695256e224f88e3dc2cc679023a0a777170591b34f2 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:3efcdaf59512389da279a9168c1d14bb5f97eff85ec263067df8d49ed365f7f0 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:94b05961aa91377992598696450f44471e266854d5e01ad6bfd571fd74f271bc |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:52b32ac14d5a69de6804860a8f40980cf64d05213419dc74c18e9c6a3fb5e2de |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:ed18fce651431c9a4c42c21cdae9e7e5b938b979f1cf7e9d7df5e6a85329ce29 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:1fcc14a95f1f2a397e9ef9529710b929147b4507ed99594e8eecf9efefb8e7e1 |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8579e3619e352d60bbfe606561ad0414e144d7b32f46f39e32c000e65ba186ec |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:de6b4cc08b5830f1ea8995ad504c125e7230782eea8c63d70cbe515ce994eeeb |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1696189fd5219d220ffbaee8a9e2531cdb6f7ee201d0cca8a3c5fe3d60b3ce48 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:3ba60f67045ab12059da25f4f7a52f632bc874415409f866757655cb18d57e00 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:2f6a7c305d1b8186d42b43caf0aa7d7542376616f5d2aab0fe251dee07fb48e8 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:1900aa828ec6242b6118aedff115c5fe9f16735dc033df78e1d5cbc2609b52ae |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e919b15f484e6c5e078d1273fe4a788b30e95017bf11124a2c8aaf6ba00daac2 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:d9636a6bb19b18fa7b9b6c11805b47b9f87ab6fa59c1aa8d1e5676d3bb1df250 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5ac2684814c2d0710dd7439b4fb183de5ccb11b1d2da0442786168d2e72b4359 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e12490b50ca76ebe489940fd1f997d7d561c54ac39272f4d833cecb1e9b8457d |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c1747af62c00cb2ef1a0828d98903f905343a25eb8e25da23aa4efbbf35e08d2 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:fde10bbfffdec7d4977206c52d3ca7397f672b1e22e38e4717ea2fcda0af2b6f |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a63d03edb4f7d18bdb4e540e28f7b07f91f6e0e554da506f95209d0dbc474df7 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:554214bdc3ecebd8435f3a7c6458f87328b24c4c024532985ae773746c2e694b |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:5de7cdaaa19f6985da424f2b1a1cb440382e955738311b537d16bb43bbdc5e60 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8736d50adba277b821e62f13d11f44842aced4858e60e0d29856b42619cbcf50 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6cedb3dd022661783955228d6460992d15e6469eaa882077d69eae7ff1c87942 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0fea5da650d4244669d95af5b8f02b2a9f6b2d348bfd1c298b093d51396a0604 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5d77aed7a7274509f7de5de5d43c2e2e28a7f36dc27d18449cc380bb3407ad2a |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:06e1d84c2c975f31dd0e9d64fc2700aba0397afeb6c2a2ee53964b89c6bbce69 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4b451851508b195cae68e1976306487a18f120333210db103ca963f135bdc438 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c8fb5ecb3c0b1cc06beb9ee0f6b228b15d5f9694a8a5988d612a7accd8592b1d |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:19186997755111c0af5a59e937fe7c5765425b8faf41e3474592705ddcab319d |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:468ed79bec64e8d0d1c16f2ef09a2ee4a699461a92ac4dfdf2c78d1c4ecaec9b |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e4861d7582dd9ee64cc8c90f6837550d220a6f200418ceb759d06f8f4cbd2c9f |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6b22b1506df1979abac4b5fd2508aacfc7396c7aec83d7ff703ba2599a007000 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c8967b23fddc6a962d921e01a58a5687878c7c3f757a978eebfcb23b92a79cb2 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:bf2ca6031319f94008f49da4de7d97a52b5a9655aa1f99384aeb984a825daee5 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:74674baa20454422c9373cdf27c633e586efc9e13fd0dfd46a9117744ed98030 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:06a3a76a21ca97e986ddc2c76365a844c761509af8c6a4c192ce24f39e8b738f |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d658ef55b2f5298e398a7faa7e84ac9ee4adad2e01081282e2fa6c39e7f1d75d |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:f8d27ac84bf4d667f7177e86f4bf31a5af656d27aa7ca8cce91ec96ea2954205 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6eef55443161d9a358a06bbfae2d183f4ec037fc534f80535a7390924a63155d |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:bab6dcdb7f7f73c9c786f868ce41ec6d07d664a3b05f9802b80ef143f797d027 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7862b301496ec9f3f65fc1b677936bc0c5e3bae8bd89cb18c2973e3a419bb3a1 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:32d073732e61d5f39bcfb4f54d3ef0251ec5e3a115ada0098c4b3fed33d08358 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f29772ee5fddc416df5c10362be239510159da809f6ea843fcbabeeb89199ea0 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:386042bb486d31a5cf2cbeac92e141b13a7fc31bf0d587116f5dbd18ee6535e0 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:aa9c16b42b31d40896b91819394f46244dbdfffe028f149640031a7f9a2073e3 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3e319614a72a9217f52584b56bcf0d205702605e6a926f4dc8a078a57b4383d5 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:04663b525bfecd368e186389a77a61afc7cd5ae87293e7145768f6e2995263c2 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d20bf9366812a41d2d0cbf184496cdd6c16bf0971e321054dd9f2a449bd5bc18 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3135ae76333286cfe4cabecb76a1e060b8537e4c113cf60b83f4255bb2c0bdd3 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:bbf1300a2de483e4d0e823363c3627a140814939563943458464325c57f9a977 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4a7327046077f4cd98ff1b031a5ae1ab15ff876293fcc7a066afe53bcf657021 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:7a6defdb7013a5158d68629375b413f1a97775a75ce0037c42c99312f016b52c |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5a328868318cb92a702f70425a0fedf748ebcc3d106d33500ebb890ca34eab40 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5b0decfce0b7bc4a6017252f8ad071f393e6a8a623dca5e87f008dd5960ef5ad |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:64c227efe25592349061bd015b9cabaaa308a5782bb255b6e40b9c2049daeb03 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce1268f0bbd541e547866683405245dd9375774f8c5f356f95537ed39fe1af96 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:64aef1755097ab101bb95c3ea0ed9202ea3a7fe7d1c406d31c4d0bbc9dd288b5 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2b809bd77e34d61f6e855427e272f91dc0ebaaac05f2e98622ca6f9ed63cae2f |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e1c30cff250281af2b173242f737dc493b3b4ae43c7d30433fda86609c3e09e8 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9208ec47a85b6c4496832d94cad457c3cf894923e65062e7400256a6f17d0720 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0b0e28d6a26ecf15e14791a1230a8d9cb7f82f6d9b336ac1e73cdc646c6b5ee9 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:9ea67686d23ec0b3a7fae3d4e7ed47628c02793937f05015eb3c56fbf00a3d3a |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:5bcc60be89f6213a85b954178d7d049e38403ed6a64e46126679ed2c188df2c5 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75e9e05ec4ed4664b80fdba915b8cc628f58281d6ef382f5c8500db556a64ca7 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1840ce8bf21e2ed97f65940b1b114367575304863b73a77f2f0c5e4cda819691 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:416a360f8c9c8d6005d636dd00f5caddf315fdc754da05397d132073dc64cf52 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
