RHSA-2026:11511HighCVSS 6.1

Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.7.10

Published
April 29, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2026-7163 — assisted-service: assisted-service: Authenticated users can gain administrative access to OpenShift clusters via credential disclosure

🎯 Affected products5

  • multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:211bed4541e76ea5b280dbe111b3ee0adc0ed74aca4c0a02de481b4212513b74_amd64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:8bcaaf6e4ce41945c3f448b5454441a24b89f85dbb0832a035d83f01642892ff_arm64 as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:968eee9473cdb66d70b08db22bbc887aa4a49658e29c6a73cfee6f30cda0d9e1_ppc64le as a component of multicluster engine for Kubernetes 2.7
  • registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e9a173fc2e1f497ff04828e4906aa81f3249c30e7804b6bc1fecb0f70daef1d3_s390x as a component of multicluster engine for Kubernetes 2.7

✅ Remediation

For more information about Assisted Installer, see the following documentation: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/clusters/cluster_mce_overview#cim-intro For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/clusters/cluster_mce_overview#mce-install-intro This documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.12.

🔗 References (4)