RHSA-2026:22645HighCVSS 9.1

Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.8 security update

Published
June 2, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-33186 →

📋 Description

CVE-2026-33186 — google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

🎯 Affected products177

  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:22265407b3f54b45e3f1b64bb55545e03e971d08e7c13dc0d0b1951588b0059d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:334c3a276d50ba3f6ab9b8fbba79ee84bef066e9b1752ffe07f556dfd40bf579_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:4b8be0b6eed11eaa92723e80de6b2b9c9399be19d7d83db4716df8e1df6fbc65_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:70dc6843556f613ca489734cd2a922000799c398b668932b9904e7ece350d642_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:0fc48086410fb7ea51f6754222403a3ea5fe1d5fbe0c31e224668e650007c49d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:a57c6351a2f413ffe9ac7c2d25ac0004bcd1fe11b7d05ecb65d0f4789ac062af_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:e3c8b2278987fad086a694bfe4d14e45c5bfe2cee1c9b4c2332f8f6d53d48095_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:fca6150c7e03703d36bc4a6e7267d11460381658f7a5bbb24e0a83ab6f80bf97_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:557b873819852db0156f191158ab087d600c5ab18e72af418b5e32906f447225_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:614087a70f143bfe24f8f4715ea1f52f0814c29a1be2076a31855966e57893a0_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:ca598622075cb4d7d2fcc8babada3789383d4a04a805361a04991aca584447cc_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:e6d2d50c38fbe047b3bcdcac7db2fa59d47923198755df4a7906247e8f28b1de_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:6374eb10c64ffcefeb28fbac459b3e41d10b322c1372ea3bb0fb9d41a480d77b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:66a57ca2bf1fd0fe18b6ab249bc5f26e2cb2e69197e41c1349dc1cb0954ead19_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:995b83f7ef5cae07d6512c0e3c64b7b60fde1e5cc2ac9888e71682d4609163df_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:ee14258f3b55f084729b108e47203b049a2ea1ab8efc06f2e32fe8212fbbb471_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2302a4c0235050fc6ca7580bd95ec22007d95c62dba6eb14e3d7eb82967c12e0_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:d6a2fe886c4e2fb5885e00c9f3f05d03fdb948341bf76aed55f4f873a9a75fc9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:eb4070cec8227a522e64efa2949ae4d88c52c1f7ff4abda08cb8305bdcc95cdc_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:f57d7ce0e09b3822f1fc02cf48c916611947a1e6b671278e7beb50bc9826babf_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:50a985dfc153232a149b6dd1496dbf865592faaff8ac98b897b38ef5255ccb71_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:562884215b0e8051bbbd847adb003891f02d1721bd418fceda13052baf5736f0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:79ad89d72c684665f2b9749d4f780cab687a2c05534657d19f26569a7cff76f2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:7c7a41fb92c3a58de026d2bfbcf417c810b0d479f2889d692bf9c442bb5885e5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:06eb93b1cae1d0834e96127b6060fcce1355f1abdd308c4ff79fa24f3ccedd74_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4c15d31293bbcc1010840b0fb0725921b02592a057c3da2cdf6406a1bc283d73_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:58dcbade227653c2d5020460d760adfe9cfdd49ab42bb0e9489e188ceaf4c1c3_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:60a1ddeeb745fdfc1aa7621ffb6f8e648f026ef233d2472b9c42bda9b9ac8513_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:2509d3c598dfafb9234f4dd74f5777b4e9f4feabdd2e513484f8c17ee652c24e_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
  • +147 more not shown

✅ Remediation

Before you apply this update, make sure all previously released errata that are relevant to your system are applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.

🔗 References (5)