RHSA-2026:54577
Vulnerability from csaf_redhat - Published: 2026-08-13 13:01 - Updated: 2026-08-15 22:59Summary
Red Hat Security Advisory: Multicluster Global Hub 1.5.7 security update
Severity
Critical
Notes
Topic: Multicluster Global Hub v1.5.7 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Critical.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift's C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as "global-hub" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.
9.9 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x | — |
Workaround
|
Threats
Impact
Critical
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.5.7 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54577",
"url": "https://access.redhat.com/errata/RHSA-2026:54577"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55969",
"url": "https://access.redhat.com/security/cve/CVE-2026-55969"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66801",
"url": "https://access.redhat.com/security/cve/CVE-2026-66801"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54577.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.5.7 security update",
"tracking": {
"current_release_date": "2026-08-15T22:59:17+00:00",
"generator": {
"date": "2026-08-15T22:59:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54577",
"initial_release_date": "2026-08-13T13:01:54+00:00",
"revision_history": [
{
"date": "2026-08-13T13:01:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-15T22:59:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat multicluster global hub 1.5.1",
"product": {
"name": "Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat multicluster global hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Abfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1786621682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786621379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786621626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1786623440"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ab780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786621343"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1786621234"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ab2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1786621682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786621379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786621626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Affa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786621343"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ac7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1786621234"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ad379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1786621682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ab453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786621379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786621626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786621343"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ad7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1786621234"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Acd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1786621682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786621379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ab497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786621626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ad4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786621343"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1786621234"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-42306",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-12T19:01:10.843543+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "RHBZ#2488484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
"url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
}
],
"release_date": "2026-06-12T18:09:22.188000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T13:01:54+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54577"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
},
{
"cve": "CVE-2026-55969",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-07-27T12:01:08.265881+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507433"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55969"
},
{
"category": "external",
"summary": "RHBZ#2507433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
"url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
}
],
"release_date": "2026-07-27T11:07:53.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T13:01:54+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54577"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
},
{
"cve": "CVE-2026-66801",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-05-26T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508045"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as \"global-hub\" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Critical: The default Strimzi transport in Multicluster Global Hub is vulnerable to privilege escalation. A compromised managed hub can exploit weak Kafka Write ACLs on the shared `gh-spec` topic and spoofed CloudEvent sources to gain cluster-admin privileges across the entire fleet of managed hubs. This allows an attacker to achieve fleet-wide administrative control from a single compromised leaf hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66801"
},
{
"category": "external",
"summary": "RHBZ#2508045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508045"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66801"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801"
}
],
"release_date": "2026-08-10T13:40:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T13:01:54+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54577"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6065e223ba12401f3bd6058f921dd3535e05e331c3ae1dd32452c1bc91d6cc76_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8716b6b65ed359d7bf25e08bc66190f8910d23513af3020fb5c5b01ce0dcfefc_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9d972f0ad2e861d55e197d70fcbb20b9f888c25db48de5ea908b2361f6ad1001_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b453630e58fe386ccf0f1f0323429e5ca93600ad54818ef6ebe2a1437cc1fb97_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b2f257311eb12181da5e961ac182561338b4e0afb66bfc0e1348af98814f443a_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bfca5230561f1901c2208ee6242831ea0b8f185c51166c8a2cfa9ac749be38bc_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cd6c5ce0a19e15ce0091d4a342599c85998453b9cb495584cce4c16ae99e25d2_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d379244d0bab3d63bd6790b3a8a0cb1a4ce2aad42494ee8fd9a1990f283d01c3_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6e6a1da8ae29ab7b2d58748d7e45941989b9c3091434a5d13731ac7d453377e6_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7fe412718d7bd3e37855a085a53394d93064741830df7e922a2164d8fcacb92a_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b497a86bb02a05f3758c6b5722fb0da61ca5f448092d322359dd4d06cdd08870_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ed25546c40b9e986a77981c9a4c9c43f929304dc0c25a507b5d041d8af4894a5_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:14205b6421ccc45ed5935e0d1e8741812f108c380440da3623064f22567ea040_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:1843b2f6e362127e0fe74fb6cf4f96828fcf7d82753370c17a23075ce7538ff9_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d4aefd119a1eecffdefec66ffc4d91462978a478a730e97f025069d4ab90f21_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c7f3aa6419753ff217d2d05a659a1951e0ad840b3c3f1d04780f489c93421c25_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d7557d40a63a755904852baa59c6106cbe16ce0e8cbc1ce5986fc50152094315_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:54fa72b965dba7dad60263362a95515ca41ca5c5d62621690c025a99a7977a77_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b780e75db2833550d5618c44d63cc374a4a38c8d327e514ef2aa2c8ce8badb95_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4fe193c51324c2cfa286f61c5e0cc10bf4e848c874967af10161a6b8e5bd321_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ffa96130ce94a9d9f51cabce8e2e6eac64f01034b596cc7d2b90d33713496ccf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…