RHSA-2026:2256HighCVSS 8.7

Red Hat Security Advisory: Red Hat multicluster global hub 1.5.3 security update

Published
February 9, 2026
Last Modified
August 28, 2026

🔗 CVE IDs covered (6)

CVE-2026-21441 →CVE-2025-12816 →CVE-2025-15284 →CVE-2025-66418 →CVE-2025-66471 →CVE-2025-68429 →

📋 Description

CVE-2025-12816 — node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications CVE-2025-15284 — qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-66418 — urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data CVE-2025-68429 — Storybook: Storybook: Information disclosure via unexpected bundling of environment variables CVE-2026-21441 — urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

🎯 Affected products22

  • Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1f5bd44374885ad72d52fe069a09b2270f42da2e29fb688357a637b9dd1893aa_arm64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dcbdff150742e549f0bce567bfbd117c0c63c49ea6817f67109833b1e94ef0c3_ppc64le as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f91a72e4c89b3cf646505ab2a3aad8457b159a3c2de5e9908aaca35389f01153_amd64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd8ad9e8f5e1eee77c9b7410d14f5ee01f38bee09935065a2b7d33c39c844e3b_s390x as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:65e1e93c8ea20fe257ac85c371404df1b13c1966e07b0b5d605ae30ef0cec42f_arm64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:bbe544ff9335b6d8b9900d3153e3b935173b0f6c0a0a462a4f3db3143fa62d5b_s390x as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c360b6c6f742fb8099e1155dbcca719493084968c00506eda2e251d7706c4dff_amd64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dc828bf3a86cb0680173e896579f7bd411a0e4f0962ab0ed9903e69c65c13a26_ppc64le as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:34776d2d4c468f6da8137323cf284e72e66919a7f3e2a84c9e699a50d064179f_ppc64le as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3d278f0a951bace167aede4fe297422c5acecf9d3a9a8b9f7afa71a610983d0a_amd64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:868a8557d8781e1c69748b98da394af9612d0880220fff1d693377cf833be711_arm64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae22809ffeede1eba4bbcdddb0b712dec45c30148c7cb39128a872f072b59972_s390x as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:3f81ee9fd7755e0bedf48d3c7afd3ccf8f4fb6b338133efd1360e65a5a90c386_amd64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:39f4686f26cc8bec840f6c77088935e05d8e822be15f63f55d1de58e0ff9cdcc_s390x as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:48184ec85768d791a0b8a96a15794f0e0f7f6f54ade9b40b782ef9c4f0b4eb5b_ppc64le as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6d74a6341b8333885d75f5b51fa5998017d10833876c6a09dfec72d8d5e672c_amd64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bedf96d186a5ad327b07ad886ee71351d4c98d47642cb44a29dc15ce8e20ed16_arm64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:690e7fb759c6be1e04f7a0aad07bf9a0eee936a2366fc1ad3ba9dafe7ef8b9cd_amd64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6efb2a533db272b844688e44d6af15f271a00053c1515496b091e4b6909e850_arm64 as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c9f875963c8f28eba52965eaf1fbddecdc57e076d117f283f7e3fe91eee5fb5c_ppc64le as a component of Multicluster Global Hub 1.5.6
  • registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f35eface5a07a2ee689969466e9162c65cd2660176fdc699776cf057cedb5e81_s390x as a component of Multicluster Global Hub 1.5.6

✅ Remediation

For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation: https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (9)