RHSA-2026:55810
Vulnerability from csaf_redhat - Published: 2026-08-17 16:44 - Updated: 2026-08-19 04:46Summary
Red Hat Security Advisory: Multicluster Global Hub 1.4.8 security update
Severity
Critical
Notes
Topic: Multicluster Global Hub v1.4.8 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Critical.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift's C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as "global-hub" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.
9.9 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le | — |
Workaround
|
Threats
Impact
Critical
References
34 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.4.8 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:55810",
"url": "https://access.redhat.com/errata/RHSA-2026:55810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55969",
"url": "https://access.redhat.com/security/cve/CVE-2026-55969"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66801",
"url": "https://access.redhat.com/security/cve/CVE-2026-66801"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55810.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.4.8 security update",
"tracking": {
"current_release_date": "2026-08-19T04:46:00+00:00",
"generator": {
"date": "2026-08-19T04:46:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:55810",
"initial_release_date": "2026-08-17T16:44:44+00:00",
"revision_history": [
{
"date": "2026-08-17T16:44:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-17T16:44:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-19T04:46:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Multicluster Global Hub 1.4.8",
"product": {
"name": "Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Multicluster Global Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1786621960"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786621693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786621455"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1786623856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786621416"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1786621340"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1786621960"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Af65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786621693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Adc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786621455"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786621416"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1786621340"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1786621960"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786621693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aaac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786621455"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Af29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786621416"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1786621340"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1786621960"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786621693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786621455"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Af9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786621416"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1786621340"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64 as a component of Multicluster Global Hub 1.4.8",
"product_id": "Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.4.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33376",
"cwe": {
"id": "CWE-183",
"name": "Permissive List of Allowed Inputs"
},
"discovery_date": "2026-05-13T20:02:51.602978+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477262"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
],
"known_not_affected": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "RHBZ#2477262",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
"url": "https://grafana.com/security/security-advisories/cve-2026-33376"
}
],
"release_date": "2026-05-13T19:28:34.473000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T16:44:44+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55810"
},
{
"category": "workaround",
"details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
},
{
"cve": "CVE-2026-33377",
"cwe": {
"id": "CWE-267",
"name": "Privilege Defined With Unsafe Actions"
},
"discovery_date": "2026-05-13T20:02:01.027996+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477246"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
],
"known_not_affected": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "RHBZ#2477246",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
"url": "https://grafana.com/security/security-advisories/cve-2026-33377"
}
],
"release_date": "2026-05-13T19:28:28.154000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T16:44:44+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55810"
},
{
"category": "workaround",
"details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
},
{
"cve": "CVE-2026-42306",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-12T19:01:10.843543+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
],
"known_not_affected": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "RHBZ#2488484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
"url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
}
],
"release_date": "2026-06-12T18:09:22.188000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T16:44:44+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
},
{
"cve": "CVE-2026-55969",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-07-27T12:01:08.265881+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507433"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
],
"known_not_affected": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55969"
},
{
"category": "external",
"summary": "RHBZ#2507433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
"url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
}
],
"release_date": "2026-07-27T11:07:53.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T16:44:44+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
},
{
"cve": "CVE-2026-66801",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-05-26T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508045"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as \"global-hub\" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Critical: The default Strimzi transport in Multicluster Global Hub is vulnerable to privilege escalation. A compromised managed hub can exploit weak Kafka Write ACLs on the shared `gh-spec` topic and spoofed CloudEvent sources to gain cluster-admin privileges across the entire fleet of managed hubs. This allows an attacker to achieve fleet-wide administrative control from a single compromised leaf hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66801"
},
{
"category": "external",
"summary": "RHBZ#2508045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508045"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66801"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801"
}
],
"release_date": "2026-08-10T13:40:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T16:44:44+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2166fa9885345c3be7c43fa459b1606f61ac9f35cc53abb65dd8fd5e6b4b93de_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5437ebf7e21bedbab79890bdbeba005cc08558e2015ed69868f0297de88b0a36_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8439f0dbf7a2504ecf9291a23341c80a65d6da91bcae6eeba57b613e8839033a_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f65ef27e2fc9146b99e248c57a9dbe4232201c4640733012f1116ff5686b6d2a_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c28ae3f509e4b42d61be90decb14af658bf114bcb6e429d862b7580fa577483_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:792974503a47cc45b138cf96c4dfc68a4e223053b4a2d66f04e346d1d302cd20_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7b10f2f08780249626214d5fa10f700972d2f27ab8d8c59cc48675f7b17f798f_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:801d982bac8568fbe1a8655a334cffb812752b1e1677f5e6615137a5c1b60df3_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6595a7acc86d1c40254cca9ca11cfee1c132c3c95151c4c0f850a76883628a3e_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:74cb04ff8483d2c80705f7fda65481389256a51ba0f27809e772854060dc41a4_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aac78bba7d135fa6848e46238033c77f7353a24c5ea4cea59ae5f9b6663ef2d7_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dc6852b0a21fc18cc69c3a05b4a59af12a29435972f82ffd68dc8b684ea96241_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:00387b28fb61aba5e23599be853aa3d1ca2ac60c61210ebab3b143b6240654b8_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:13cf42dcaa7e81a55d0ec079e7c30dc94f170b5c2afc25563c9e76ba194b3e66_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:24425ecd3298355d2dacd8916076a53effc47d75c5ad4eaad3315e81676bc6ab_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:44398c0c69a843b38209fa0f34264396e7985fd47a802329c04ccc98c1855130_arm64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5f0bf5ac15dc9b542eebb9d0bba9e5f764a8ea772d6dd096f219458786fcaade_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:53ab458b15b639a3fa185a26995817d05c2379d9757b370a6cf078c9b5519fe8_ppc64le",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7c20f24f0cd291831d8857c087fd5332ce0f72e365faece2db881517f594f9d5_amd64",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f29739944614d96575fb1a9e2df3a11fa7bf9fe861b555d6d9092d6eea8f2565_s390x",
"Multicluster Global Hub 1.4.8:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f9e15fced05d8b4301a11cbddb4e7a04b92db52badf4459771d0ce83ec195dea_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…