The Red Hat Assisted Installer RHEL 9 components for the multicluster engine for Kubernetes 2.11.1 release include foundational components for centralized management of multiple Kubernetes-based clusters. The advisory identifies CVE-2026-7163 (along with CVE-2026-33186 and CVE-2026-34986) affecting these components, with a CVSS 3.1 score of 6.1 indicating a medium severity vulnerability. The vulnerability involves a scenario with low attack complexity and requires low privileges with user interaction, potentially impacting confidentiality with a scope change. The advisory does not provide any patches or fixes at this time and does not indicate any known exploitation in the wild. Documentation links are provided for installation and usage guidance.

The vulnerability (CVE-2026-7163) has a medium severity with a CVSS score of 6.1. It requires local or adjacent network access with low complexity and low privileges, and user interaction is required. The vulnerability affects confidentiality with a scope change, but does not impact integrity or availability. No known exploits are reported. The impact is limited to potential unauthorized disclosure of information within the multicluster engine components used for Kubernetes cluster management.

No official fix or patch is currently available for this vulnerability as per the vendor advisory. Users should monitor Red Hat security advisories for updates and apply patches once released. Refer to the official Red Hat documentation for installation and configuration best practices. Since no known exploits exist in the wild, immediate emergency action is not indicated, but cautious deployment and limiting access to affected components is advisable until a fix is provided.