RHSA-2026:26072HighCVSS 8.1

Red Hat Security Advisory: Kiali 1.73.32 for Red Hat OpenShift Service Mesh 2.6

Published
June 15, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-9277 →

📋 Description

CVE-2026-9277 — shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators

🎯 Affected products9

  • Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:1f41803cee88176e33d38072cdbbdee12a65ce3e277bcb86208589b15b8f5617_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2e34b2e8093a73db6291d08f97c8d0024eae1501234d357106756b755c53c95f_arm64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5e8c9a77b41e4fb0b2ce4efc8202e157a9cc10eee21e3faa7b8fe99a378bea11_s390x as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:b5519a778cabdcb0e5be55a7623494dd375531a0b1ecc6510b0bf2ae831ab171_amd64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:0425fb2f7d03cb753a5320b4e0c5f37cb1475ca9b73f1a2dbff26c59f1729edf_amd64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:415828a4267fd071d4684ed15363916253441fd265e4fbc19eee79ae56af5e57_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:53ba9d76efb63ba3c173162e6077d6e6e69ab35f6729e8d398b5c5e710bdc282_s390x as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:9a87cf26aab9064de279d53d1d599a85f7e4d9a40c50ea6f427fd54e64c6379d_arm64 as a component of Red Hat OpenShift Service Mesh 2.6

✅ Remediation

See Kiali 1.73.32 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x

🔗 References (5)