The Red Hat Multicluster Global Hub 1.6.2 update addresses multiple security vulnerabilities identified by CVE-2025-47907 and nine additional CVEs. The product allows centralized management of multiple Kubernetes hub clusters. The advisory classifies the security impact as Important and provides updated container images as part of the fix. The vulnerabilities relate to issues categorized under CWEs such as race conditions (CWE-362), improper resource shutdown (CWE-770), path traversal (CWE-22), and others (CWE-1050). The vendor advisory does not provide detailed technical descriptions or CVSS scores but confirms the release of fixed images and a security update. No known exploits in the wild have been reported. The update is not for a cloud service; thus, remediation requires user action to deploy the updated version.

The vulnerabilities collectively pose a high security risk to deployments of Red Hat Multicluster Global Hub 1.6.2, potentially allowing attackers to exploit race conditions, path traversal, and other weaknesses. This could lead to unauthorized access or disruption of cluster management functions. The advisory rates the impact as Important, indicating significant but not critical risk. No active exploitation has been observed in the wild at the time of the advisory.

Red Hat has released Multicluster Global Hub version 1.6.2 as a security update containing fixes for the identified vulnerabilities. Users should upgrade to this version to mitigate the security risks. The advisory provides updated container images for deployment. Since this is not a cloud service, remediation requires manual update by the user. No additional mitigation steps or workarounds are specified in the advisory.