RHSA-2026:54392

Vulnerability from csaf_redhat - Published: 2026-08-12 14:31 - Updated: 2026-08-13 13:04
Summary
Red Hat Security Advisory: Multicluster Global Hub 1.6.5 security update
Severity
Critical
Notes
Topic: Multicluster Global Hub v1.6.5 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-42306

A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.

7.2 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64 —
Workaround
Threats
Impact Important
CVE-2026-55969

A flaw was found in Apache Thrift's C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64 —
Workaround
Threats
Impact Important
CVE-2026-66801

A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as "global-hub" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.

9.9 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-290 - Authentication Bypass by Spoofing
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le —
Workaround
Threats
Impact Critical
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.6.5 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:54392",
        "url": "https://access.redhat.com/errata/RHSA-2026:54392"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55969",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66801",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66801"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54392.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.6.5 security update",
    "tracking": {
      "current_release_date": "2026-08-13T13:04:06+00:00",
      "generator": {
        "date": "2026-08-13T13:04:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2026:54392",
      "initial_release_date": "2026-08-12T14:31:52+00:00",
      "revision_history": [
        {
          "date": "2026-08-12T14:31:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-12T14:32:02+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-13T13:04:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.6.5",
                "product": {
                  "name": "Multicluster Global Hub 1.6.5",
                  "product_id": "Multicluster Global Hub 1.6.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785863006"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786068047"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786068507"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1786072360"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786071343"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973305"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785863006"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Aeeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786068047"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786068507"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786071343"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Aa6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973305"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785863006"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Afd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786068047"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786068507"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786071343"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973305"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785863006"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ac572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1786068047"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ac1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1786068507"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786071343"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973305"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64 as a component of Multicluster Global Hub 1.6.5",
          "product_id": "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-42306",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-06-12T19:01:10.843543+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2488484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "RHBZ#2488484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
        }
      ],
      "release_date": "2026-06-12T18:09:22.188000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-12T14:31:52+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54392"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
    },
    {
      "cve": "CVE-2026-55969",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-27T12:01:08.265881+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507433"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507433",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
          "url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
        }
      ],
      "release_date": "2026-07-27T11:07:53.785000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-12T14:31:52+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54392"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
    },
    {
      "cve": "CVE-2026-66801",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "discovery_date": "2026-05-26T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508045"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as \"global-hub\" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Critical: The default Strimzi transport in Multicluster Global Hub is vulnerable to privilege escalation. A compromised managed hub can exploit weak Kafka Write ACLs on the shared `gh-spec` topic and spoofed CloudEvent sources to gain cluster-admin privileges across the entire fleet of managed hubs. This allows an attacker to achieve fleet-wide administrative control from a single compromised leaf hub.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
          "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66801"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508045",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508045"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66801",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66801"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801"
        }
      ],
      "release_date": "2026-08-10T13:40:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-12T14:31:52+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54392"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6f2e5f0fdfee2022b20ee0dcc863f2dd7f1c625817f52fe8239ab5ecc79f2733_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c572fb658b37c4629240e46dcf2512d2e26b314354736c92f610df194f08c840_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eeb2cf9ee5d4d464d99fa5642aea3f3d68ec5d7483d8c716aa16ade4cc50b63e_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fd4dde219f95e134f6fc6e99dc4e5d6d307c4970784153bb907e94d62277e0ff_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:538f16143d15752f7a6753667f13e8d7b48efb34d0cff17a9f726a7de220ecf3_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:54702f0054d14967b4ef2b77ff60f76624d5a3fa3272a51e4ef35d251a1e99bd_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d42c9fe938f916ec83ef7c93fb7e403dae6fe7fbecb5dd88fbf7e2befbcef0_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6c287b461cadc451a3380c887d5255bdfc21761cd26beccd3e4e1a5ce88a441a_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5495446e8d0334f94f7f6830c75575ca8b4896309a73b7938565ec785d7fb589_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c3426e56534f063a26f14fddeaef9a75c2457bc11ffc7324545941925956d6c_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:6c999e88b89c35fffdac9526dac83e28225cdbdb78a1b4d868bd401e3460dbe4_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c1de0aac6452070560d1481b55530c441c6d3a55c215ee4bca23c7bbdaa91538_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7c855d1a21309a5a889c02692b85df0acaf936120a876687f234f97944eb8f86_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:23351c3eb3f9dd1a76fbea9d18c284027e49ee0226fef279300bf6154269cd6e_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:577df46c89118e93992b112cfabd1848127d3eec85cddd96dc48410b43528381_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ed372714f1fb64c2136954b842c68a9e17943c9c773b7c68da695a4062c8302_amd64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a6bd3e7a1398efbdeaab7a57604e1d8c80d7c3263f87efb1d984d4cf70509233_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3683dec0e1995e5f74da731a720f67c74b03fc22f9ee4fde9eae2dfda6e9541b_s390x",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:45ee466e62a5c23465c708ef45fe2c382a511d8aab27805b9b59b0a897ea34b8_arm64",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4e9983ebd37e06969fbc9ecc7a07dfebea6bf1b1a42b5e28678646f2a0466932_ppc64le",
            "Multicluster Global Hub 1.6.5:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:948f18c01dcf6d1525d7eab475bea09396969d8c3269ff5b5f449c6ef78928a5_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "multicluster-global-hub: multicluster-global-hub: shared Kafka gh-spec topic Write ACL plus spoofable CloudEvent source enables fleet-wide cluster-admin from any compromised managed hub"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.