This security advisory from Red Hat Product Security announces the general availability of the satellite/iop-host-inventory-frontend-rhel9 container image for Red Hat Satellite 6.18. The advisory addresses vulnerabilities identified by three CVEs, including CVE-2026-21441, which are rated critical. Red Hat Lightspeed in Satellite provides local system health and configuration analysis by applying predefined rules to local data such as installed packages and running services. The advisory does not provide specific patch details or fixes but directs users to Red Hat Satellite documentation for installation and configuration guidance. The container image is published in the Red Hat container registry for amd64 architecture. No known exploits in the wild are reported at this time.

The vulnerabilities are rated critical and affect Red Hat Satellite 6.18 and related components, specifically the satellite/iop-host-inventory-frontend-rhel9 container image. The impact involves potential security risks related to system health and configuration analysis components within Red Hat Lightspeed in Satellite. However, no known exploits in the wild have been reported. The advisory does not detail the exact impact of each CVE but groups them under this critical advisory.

The vendor advisory does not list any patches or fixes currently available for these vulnerabilities. Users are advised to refer to the Red Hat Satellite documentation for installing and configuring Red Hat Lightspeed in Satellite locally. Since this is a container image update, deploying the updated satellite/iop-host-inventory-frontend-rhel9 container image from the Red Hat container registry is recommended once available. Patch status is not yet confirmed — check the Red Hat advisory (RHSA-2026:8500) for current remediation guidance.