Find a vulnerability

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.8.1 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:52946",
        "url": "https://access.redhat.com/errata/RHSA-2026:52946"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33376"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33377"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55677",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55677"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55969",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66801",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66801"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52946.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.8.1 security update",
    "tracking": {
      "current_release_date": "2026-08-11T15:09:23+00:00",
      "generator": {
        "date": "2026-08-11T15:09:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2026:52946",
      "initial_release_date": "2026-08-10T16:32:57+00:00",
      "revision_history": [
        {
          "date": "2026-08-10T16:32:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-10T16:33:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-11T15:09:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.8.1",
                "product": {
                  "name": "Multicluster Global Hub 1.8.1",
                  "product_id": "Multicluster Global Hub 1.8.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.8::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Aeac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785443657"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785763319"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785547017"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1786372816"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786067967"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973181"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785443657"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785763319"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785547017"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786067967"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973181"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785443657"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785763319"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785547017"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Af1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786067967"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973181"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785443657"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785763319"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785547017"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ab421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786067967"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973181"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x as a component of Multicluster Global Hub 1.8.1",
          "product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.8.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T16:32:57+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52946"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-33376",
      "cwe": {
        "id": "CWE-183",
        "name": "Permissive List of Allowed Inputs"
      },
      "discovery_date": "2026-05-13T20:02:51.602978+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477262"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477262",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
          "url": "https://grafana.com/security/security-advisories/cve-2026-33376"
        }
      ],
      "release_date": "2026-05-13T19:28:34.473000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T16:32:57+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52946"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
    },
    {
      "cve": "CVE-2026-33377",
      "cwe": {
        "id": "CWE-267",
        "name": "Privilege Defined With Unsafe Actions"
      },
      "discovery_date": "2026-05-13T20:02:01.027996+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477246"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477246",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
          "url": "https://grafana.com/security/security-advisories/cve-2026-33377"
        }
      ],
      "release_date": "2026-05-13T19:28:28.154000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T16:32:57+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52946"
        },
        {
          "category": "workaround",
          "details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
    },
    {
      "cve": "CVE-2026-53492",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-01T19:01:34.238078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "release_date": "2026-07-01T17:59:12.552000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T16:32:57+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52946"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
    },
    {
      "cve": "CVE-2026-55677",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-06-26T17:01:45.110038+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in the Echo web framework. The discrepancy in URL path decoding between the router and static file handler allows an unauthenticated attacker to bypass access controls and read arbitrary static files. This could lead to the exposure of sensitive data hosted on affected Red Hat products utilizing the Echo framework for serving static content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55677",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq",
          "url": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq"
        }
      ],
      "release_date": "2026-06-26T16:15:55.633000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T16:32:57+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52946"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy"
    },
    {
      "cve": "CVE-2026-55969",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-27T12:01:08.265881+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507433"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507433",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
          "url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
        }
      ],
      "release_date": "2026-07-27T11:07:53.785000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T16:32:57+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52946"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
    },
    {
      "cve": "CVE-2026-66801",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "discovery_date": "2026-05-26T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508045"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as \"global-hub\" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Critical: The default Strimzi transport in Multicluster Global Hub is vulnerable to privilege escalation. A compromised managed hub can exploit weak Kafka Write ACLs on the shared `gh-spec` topic and spoofed CloudEvent sources to gain cluster-admin privileges across the entire fleet of managed hubs. This allows an attacker to achieve fleet-wide administrative control from a single compromised leaf hub.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
          "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66801"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508045",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508045"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66801",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66801"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801"
        }
      ],
      "release_date": "2026-08-10T13:40:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T16:32:57+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52946"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
            "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.7.2 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:53530",
        "url": "https://access.redhat.com/errata/RHSA-2026:53530"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33376"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33377"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42151"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42154"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43870",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43870"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46384",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46384"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46385",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46385"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55677",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55677"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55969",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66801",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66801"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53530.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update",
    "tracking": {
      "current_release_date": "2026-08-11T15:09:24+00:00",
      "generator": {
        "date": "2026-08-11T15:09:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2026:53530",
      "initial_release_date": "2026-08-11T14:11:42+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T14:11:42+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-11T14:11:58+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-11T15:09:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.7.2",
                "product": {
                  "name": "Multicluster Global Hub 1.7.2",
                  "product_id": "Multicluster Global Hub 1.7.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785442872"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785775948"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ac84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785773056"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1785780023"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1785773214"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ab7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785442872"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Aa62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785775948"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ab5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785773056"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ab8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1785773214"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785442872"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Aff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785775948"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785773056"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1785773214"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ac815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785442872"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ae550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785775948"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785773056"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Aaf5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1785773214"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-33376",
      "cwe": {
        "id": "CWE-183",
        "name": "Permissive List of Allowed Inputs"
      },
      "discovery_date": "2026-05-13T20:02:51.602978+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477262"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477262",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
          "url": "https://grafana.com/security/security-advisories/cve-2026-33376"
        }
      ],
      "release_date": "2026-05-13T19:28:34.473000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
    },
    {
      "cve": "CVE-2026-33377",
      "cwe": {
        "id": "CWE-267",
        "name": "Privilege Defined With Unsafe Actions"
      },
      "discovery_date": "2026-05-13T20:02:01.027996+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477246"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477246",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
          "url": "https://grafana.com/security/security-advisories/cve-2026-33377"
        }
      ],
      "release_date": "2026-05-13T19:28:28.154000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
    },
    {
      "cve": "CVE-2026-33811",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-05-07T20:01:34.913869+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467822"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467822",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767860",
          "url": "https://go.dev/cl/767860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78803",
          "url": "https://go.dev/issue/78803"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4981",
          "url": "https://pkg.go.dev/vuln/GO-2026-4981"
        }
      ],
      "release_date": "2026-05-07T19:41:19.285000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
    },
    {
      "cve": "CVE-2026-39821",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-22T16:00:52.844126+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767220",
          "url": "https://go.dev/cl/767220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78760",
          "url": "https://go.dev/issue/78760"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5026",
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "release_date": "2026-05-22T15:01:21.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
    },
    {
      "cve": "CVE-2026-42151",
      "cwe": {
        "id": "CWE-256",
        "name": "Plaintext Storage of a Password"
      },
      "discovery_date": "2026-05-04T19:02:26.983660+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466507"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466507",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18587",
          "url": "https://github.com/prometheus/prometheus/pull/18587"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18590",
          "url": "https://github.com/prometheus/prometheus/pull/18590"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
          "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
        }
      ],
      "release_date": "2026-05-04T18:12:16.917000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
    },
    {
      "cve": "CVE-2026-42154",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-04T19:02:19.626646+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466505"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466505",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18584",
          "url": "https://github.com/prometheus/prometheus/pull/18584"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18585",
          "url": "https://github.com/prometheus/prometheus/pull/18585"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
          "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
        }
      ],
      "release_date": "2026-05-04T18:13:12.340000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
    },
    {
      "cve": "CVE-2026-42306",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-06-12T19:01:10.843543+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2488484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "RHBZ#2488484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
        }
      ],
      "release_date": "2026-06-12T18:09:22.188000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
    },
    {
      "cve": "CVE-2026-43870",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-05-05T09:01:02.388589+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466671"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Apache Thrift allows a remote attacker to trigger a denial of service through uncontrolled resource consumption. Additionally, the vulnerability enables path traversal for unauthorized file access and HTTP request/response splitting, potentially leading to further web-based attacks in Red Hat products that integrate Apache Thrift.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43870"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466671",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466671"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43870",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43870"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy",
          "url": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy"
        }
      ],
      "release_date": "2026-05-05T07:45:35.699000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities"
    },
    {
      "cve": "CVE-2026-46384",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-05-29T21:02:03.061736+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483482"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46384"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483482",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
        },
        {
          "category": "external",
          "summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
          "url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
        }
      ],
      "release_date": "2026-05-29T19:58:21.535000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
    },
    {
      "cve": "CVE-2026-46385",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-05-29T21:01:37.087371+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483475"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46385"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483475",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
        },
        {
          "category": "external",
          "summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
          "url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
        }
      ],
      "release_date": "2026-05-29T19:58:59.667000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
    },
    {
      "cve": "CVE-2026-53488",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-07-01T02:01:09.589815+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
        }
      ],
      "release_date": "2026-07-01T00:11:20.610000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
    },
    {
      "cve": "CVE-2026-53492",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-01T19:01:34.238078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "release_date": "2026-07-01T17:59:12.552000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
    },
    {
      "cve": "CVE-2026-55677",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-06-26T17:01:45.110038+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in the Echo web framework. The discrepancy in URL path decoding between the router and static file handler allows an unauthenticated attacker to bypass access controls and read arbitrary static files. This could lead to the exposure of sensitive data hosted on affected Red Hat products utilizing the Echo framework for serving static content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55677",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq",
          "url": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq"
        }
      ],
      "release_date": "2026-06-26T16:15:55.633000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy"
    },
    {
      "cve": "CVE-2026-55969",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-27T12:01:08.265881+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507433"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507433",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
          "url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
        }
      ],
      "release_date": "2026-07-27T11:07:53.785000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
    },
    {
      "cve": "CVE-2026-66801",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "discovery_date": "2026-05-26T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508045"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as \"global-hub\" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Critical: The default Strimzi transport in Multicluster Global Hub is vulnerable to privilege escalation. A compromised managed hub can exploit weak Kafka Write ACLs on the shared `gh-spec` topic and spoofed CloudEvent sources to gain cluster-admin privileges across the entire fleet of managed hubs. This allows an attacker to achieve fleet-wide administrative control from a single compromised leaf hub.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66801"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508045",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508045"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66801",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66801"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801"
        }
      ],
      "release_date": "2026-08-10T13:40:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T14:11:42+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53530"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c815032f2a046041adfac5a982a763a6536b1619a3c43f54f8eb6b585bbcab98_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c84a08f5577c670c5514bc4ef899861c6b1c13f89410a4f83f08b0cc8f6352fb_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5cf6ec50135435f6626f10c57a11c76af61c5f278c04bcfaf992f3621db88005_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub"
    }
  ]
}