What’s Vulnerable › Products

Red Hat Advanced Cluster Management for Kubernetes 2 vulnerabilities

44 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 32 published in the last 12 months.

Check whether your Red Hat Advanced Cluster Management for Kubernetes 2 version is affected

Exploited Red Hat Advanced Cluster Management for Kubernetes 2 vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest Red Hat Advanced Cluster Management for Kubernetes 2 vulnerabilities

• CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
• CVE-2026-89091 — Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution (CVSS 8.8)
• CVE-2026-71299 — Maestro: maestro: rest api write endpoints registered without authentication middleware (CVSS 6.5)
• CVE-2026-71298 — Maestro: sql identifier injection via properties.* search filter and orderby field (CVSS 6.4)
• CVE-2026-71297 — Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional (CVSS 5.4)
• CVE-2026-101919 — Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control plane (CVSS 8.8)
• CVE-2026-93685 — Multicluster-observability-addon: multicluster-observability-addon: possible unauthenticated debug/metrics endpoint via cmdfactory.newcontrollercommandconfig (confirmed exposed by engineering) (CVSS 5.4)
• CVE-2026-92615 — Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed (CVSS 6.6)
• CVE-2026-66786 — Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets (CVSS 9.1)
• CVE-2026-66785 — Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack (CVSS 8.7)
• CVE-2026-66780 — Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity (CVSS 6.5)
• CVE-2026-75924 — Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval (CVSS 8.7)
• CVE-2026-66783 — Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref (CVSS 4.4)
• CVE-2026-66782 — Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps (CVSS 5.8)
• CVE-2026-66781 — Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication (CVSS 5.4)
• CVE-2026-70495 — Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters (CVSS 8.8)
• CVE-2026-71846 — Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege (CVSS 6.5)
• CVE-2026-71845 — Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault() (CVSS 7.7)
• CVE-2026-71475 — Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url path (CVSS 6.8)
• CVE-2026-71474 — Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response (CVSS 7.1)
• CVE-2026-44495 — Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge (CVSS 7.7)
• CVE-2026-10805 — Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend (CVSS 6.7)
• CVE-2026-10101 — Assisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view users (CVSS 6.3)
• CVE-2025-57851 — Mce: privilege escalation via excessive /etc/passwd permissions (CVSS 6.7)
• CVE-2026-4740 — Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation (CVSS 8.2)