The Red Hat multicluster engine for Kubernetes v2.8 images, which facilitate centralized management of Kubernetes clusters across data centers and clouds, are affected by two vulnerabilities identified as CVE-2025-30153 and CVE-2026-33186. These vulnerabilities relate to the foundational components that enable cluster creation, import, and configuration distribution via APIs. The advisory does not provide detailed technical descriptions or CVSS scores but categorizes the severity as high. No known exploits have been reported. The advisory references updated images and documentation for installation but does not explicitly confirm a patch or fix status.

The vulnerabilities impact the multicluster engine for Kubernetes v2.8, which is critical for managing multiple Kubernetes clusters centrally. Potential impacts could affect cluster management operations or configuration distribution; however, specific impacts are not detailed. No known exploits in the wild have been reported, reducing immediate risk. The high severity rating indicates the vulnerabilities could have significant consequences if exploited.

The vendor advisory does not explicitly state that a patch or fix is available but references updated images and documentation for installation of the multicluster engine. Users should consult the official Red Hat documentation linked in the advisory to obtain and deploy the latest images for version 2.8.7. Patch status is not explicitly confirmed; therefore, users should verify the current remediation guidance directly from Red Hat's security advisory and update accordingly. No statements indicate that no action is required or that the issue is already mitigated.