This advisory concerns multiple security vulnerabilities in the multicluster engine for Kubernetes v2.8 images, which facilitate centralized management of Kubernetes clusters across data centers and clouds. The advisory references 15 CVEs, including CVE-2025-47914, covering various weaknesses (e.g., CWE-125, CWE-770, CWE-22, CWE-131, CWE-289). The advisory does not explicitly state that fixes are available or provide patched versions. The multicluster engine enables creation and import of Red Hat OpenShift Container Platform clusters and uses APIs for configuration management based on placement policies.

The vulnerabilities affect the multicluster engine for Kubernetes v2.8 images, potentially impacting the security of centralized cluster management across multiple Kubernetes environments. The advisory categorizes the severity as high but does not provide specific impact details or known exploits in the wild. Without explicit patch information, the risk remains that affected deployments could be vulnerable to exploitation of these issues.

The vendor advisory does not list any fixes or patched versions for these vulnerabilities. Patch status is not yet confirmed — check the Red Hat advisory RHSA-2026:30650 for current remediation guidance. Users should monitor Red Hat's official channels for updates and follow the installation documentation for the multicluster engine to apply any future updates promptly.