multicluster-globalhub/multicluster-globalhub-rhel9-operator vulnerabilities
CVEs whose affected-version data names the multicluster-globalhub/multicluster-globalhub-rhel9-operator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-66792Critical· 9.9A flaw was found in the multicloud-operators-subscription component
A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitatio…
▾ MidnightRed Hat · multicluster-globalhub/multicluster-globalhub-agent-rhel9EPSS 0.69%via NVD
CVE-2026-71577Medium· 6.3A flaw was found in multicluster-global-hub
A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This allows a compromised managed hub to intercept and collect sen…
▾ SunlitRed Hat · multicluster-globalhub/multicluster-globalhub-rhel9-operatorEPSS 0.40%via NVD