# Red Hat Multicluster Engine for Kubernetes.

Every CVE that names Red Hat Multicluster Engine for Kubernetes among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers](https://agentprime.io/advisories/CVE-2026-114236.md)
  `CVE-2026-114236` · CVE record: Red Hat Confidential Compute Attestation and 4 more · CVSS 3.3 Low · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional](https://agentprime.io/advisories/CVE-2026-71297.md)
  `CVE-2026-71297` · CVE record: Red Hat Multicluster Engine for Kubernetes · CVSS 5.4 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Authentication bypass
- [Maestro: maestro: rest api write endpoints registered without authentication middleware](https://agentprime.io/advisories/CVE-2026-71299.md)
  `CVE-2026-71299` · CVE record: Red Hat Multicluster Engine for Kubernetes · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Authentication bypass
- [Maestro: sql identifier injection via properties.\* search filter and orderby field](https://agentprime.io/advisories/CVE-2026-71298.md)
  `CVE-2026-71298` · CVE record: Red Hat Multicluster Engine for Kubernetes · CVSS 6.4 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: SQL injection
- [Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control plane](https://agentprime.io/advisories/CVE-2026-101919.md)
  `CVE-2026-101919` · CVE record: Red Hat Multicluster Engine for Kubernetes · CVSS 8.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-20
- [Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval](https://agentprime.io/advisories/CVE-2026-75924.md)
  `CVE-2026-75924` · CVE record: Red Hat Multicluster Engine for Kubernetes and 1 more · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation
- [Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates](https://agentprime.io/advisories/CVE-2026-16242.md)
  `CVE-2026-16242` · CVE record: Red Hat multicluster engine for Kubernetes 2.1 and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Authentication bypass
- [Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend](https://agentprime.io/advisories/CVE-2026-10805.md)
  `CVE-2026-10805` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Command injection
- [Assisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view users](https://agentprime.io/advisories/CVE-2026-10101.md)
  `CVE-2026-10101` · CVE record: Red Hat Multicluster Engine for Kubernetes · CVSS 6.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: Information disclosure
- [Mce: privilege escalation via excessive /etc/passwd permissions](https://agentprime.io/advisories/CVE-2025-57851.md)
  `CVE-2025-57851` · CVE record: Red Hat Multicluster Engine for Kubernetes · CVSS 6.4 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-multicluster-engine-for-kubernetes>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-multicluster-engine-for-kubernetes/>. Everything for agents: <https://agentprime.io/llms.txt>.