RHSA-2026:11858HighCVSS 8.8

Red Hat Security Advisory: multicluster engine for Kubernetes v2.7.10 security update

Published
April 29, 2026
Last Modified
July 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-29063 →

📋 Description

CVE-2026-29063 — immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution

🎯 Affected products109

  • multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1e3c923dff84acc9ed64c56095ec2731d1781c8723a3fc0684c6d4afbad9b36a_s390x as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1ea30581d8013607d6ba364e41f5e440c253192380a713e2c05fe06a0d9b4c9d_ppc64le as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d4dc8083d6ddcc103d81198a6037e064e1c10cc1e867a15e956d547db73ef8c4_arm64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:da13c5e439b26322de6f8789e9049e84457a8272cc254de03136c558b90695b0_amd64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0fbf9f557247996e15f14db7d390813af43066a9abfae13d03fa9202dd83e104_ppc64le as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6e16e81365901d79736b38a3d9351f2f6fd3f824f0559f4e4f83a562b96deb74_amd64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a3a5268c82f8176921c02fcf8cba7d01118f4310d6ea7928816a998ac4b799f5_s390x as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f1ad744885b56fc6a5d69ecd8052b5fcb65ab17a59d247131599096554d0d253_arm64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:07c4ab11ef079cb9126d434b16957a8a34544941bee4a652571bd1629c7ac0d7_amd64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1610ebe706307979fb542fbb42f6106fb88c770a124a30a199b76423d5c9c303_s390x as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:3f0ff934f3991261e24efadb2d41444d2e4d4aec635ada59db0f7202161f9060_ppc64le as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:9f01b164511f3b02d04efc81637ef9b288aa2590afa6ac8511b90d9cd6bb5a71_arm64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:27927ad330c942f758d3d60cc982ccc518a662bc06f18c1d322100ba688a8dda_arm64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6212192c0b9fec9db6b093b21d116b14602bb9fa769b474dc2b4dc61640fc29c_s390x as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6fc92517be4297099c775ba856522293701a8846857888adae5712b8cb663d4f_amd64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:b96f5932592d77f9c09f3c219b24c300144431c2e43f3d04a915607e44700d7e_ppc64le as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:02cd4a0df1b9ac62b962724fd0f296abd6a9e39f8e7349118f600db2e2c0800b_arm64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0af8b12a1e1023a7e9fa980400f34df8db2610698bc96ed2f32e3d27027012d5_ppc64le as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:21e0de6f6e3374c185d4e0e94bf25b27323e1460640453fae33c713a2e184de8_s390x as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:24b874a79f063b9eeaafb87353ec0fc907bd05dee6b012cb36309f706c8fb495_amd64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:40a9556b5d2f885c78d48e544d634cbb06e1f1fd4ca66eb23c65e5df3031e923_s390x as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:7c317a26a79f101aa50f730e11c51817d9c7e9e34ce17f72d6564cf9defb08b0_amd64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8a280435f819797cec9d52d88c25bc5a5d508923fc33b8d8486dfc082760d497_arm64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d3c2d36cd5e18c49a8d54c70bcd74b11746016b269e7dd67a90b5cc302f4ca50_ppc64le as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:7008e3dbe5781bbf4faf9a3f6ec8342d9bdd538677252e9413d7512cca5e06e5_arm64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:70ee99fa68be122a2df7713d2cb0eb7b01a1a783931e1ba8352531b1c978d319_amd64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ccd678910bce97fc3402868756ce79aadc6bdeaf3c781b13a35be3dc9b7d0aa_s390x as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:9e75c28e5cf72bab6545b582936375beabe1391afa26b874dd707889b8035020_ppc64le as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:65f94d015636d8e88c8a0d81fc8f5d63f70a282faa5b9376e813e36ec649dcd9_s390x as a component of multicluster engine for Kubernetes 2.7
  • +79 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/clusters/cluster_mce_overview#mce-install-intro

🔗 References (4)