RHSA-2026:13847HighCVSS 8.8

Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.1 security update

Published
May 5, 2026
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-29063 →

📋 Description

CVE-2026-29063 — immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution

🎯 Affected products189

  • Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:15aaf26d8b241a47c74f943ba764ec12d6c587042348e4d3f11035caa81d0c26_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:63b5f74eadf6a4833866b62e0e2399a85a2444131aee78f604b411de279ccd63_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:d36c50d4349bc0818341bc9707b459783648dc4419bcc59f6e2266fb4a481707_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:de1ba0fc4b7c75b70b85a11ec09979e718dd2f5c84f020c5be6c2582eac15714_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:a3829c876d93c478069f080b44370117b129fcbbd3ca3cb5ba4f44d49190be15_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:acb0dea7fcfa0c7271df016ba8ee1512e60bc303d3a849a0efdff7d19b09fb76_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:ba9dfd28b19fd836375cdc0f68ea639d88d49530eccc17e2bb459b55d611849f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:bb85f2b65383ec4bfd77f0a97cf4be52bac38f439a11a2ed200ede7e930fb329_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:88bf3e551a764b834b38ae5a26fecf7ef229c12add6d3642ea21dd48c7ff93e9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:bb9e354f1a06923507b748f261f70a2b97badc73fdb639297c889a0a7db791cc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:c9339e5111b817664a9b188a2316509719a3766424f7a1b64b723d6a633b5f61_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:eae2dbcb393bce005a95773d9ffde96f4262fa9507c803ebbfb2458adb521f50_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:0c6d6fafe0b688d827709d0504489c9c3fa37a6df397501b142efa0283bf36bc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:18e608e2b0f69cb9d73bfcf62f8d08762fca4dcb93de4ec2a375a5949a267524_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:350ce399b122bb0284d9fd156eed5bae372e578e2e1f5994c5073bf65e4bb674_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:88549d01446a662679945b2bd65a435313aa82d02ce97abed1fcccd3a5c0bcaa_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:5428657b0470d43ff03d8ab8ee4f2cefc7161a6b43445db4eeae287639c17230_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:8da15e841792bc6611671fbf5cb0c86e286d9cf413a090a2344ed5d1c67e5915_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9cdd0a49a8c281f4218f2d97db306349869878c8740497a5e2b1faffb9844e1a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:ccd6e06f8bab917a43034c238e8ea8ac17aea0a51c29a3ac38ee41d0ef73dc6a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:1da70fc1124e87e3875a1626124eaabdd835273a67b659ea02bdd502f30ca80d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:2f33ad158bc8f376c5f25aa05a10b58c9a9a311ea880637d2429eb687a8deeb3_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a08a01962d56d5e4da7816f81ec13e4ad2b57dec5df2e3195f7b3a82e26e1145_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:ce60f32106581ab87d582707d506e2209ae63a32adb0dc6a2d2fed4e2ac44f75_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:5512f0df4c9de0cad1252f0e93f51e7bd8169d2ac699fe5d75b5a888d897e58e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:65c6b461106a97a489f43cce91809dc5d837714ce42b439ab04b3f0028b7a287_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:b70cc4216e89078c6d096f434328d178bde97c24194921d72814eb5674835952_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:c79f88be07f47557ce02e4c2bc23b263fee4791d6c2f1ba8521f647002745680_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:49a41e0567281f7cb2b628279b0bbac706147e4fb2c1c3b224dda0f8bd22d09d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
  • +159 more not shown

✅ Remediation

Before you apply this update, make sure all previously released errata that are relevant to your system are applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (5)