Red Hat Multicluster Global Hub 1.4.5 addresses multiple security vulnerabilities (CVE-2025-61726, CVE-2025-61728, CVE-2025-68121) as part of a security update. The product facilitates centralized management of multiple Kubernetes hub clusters. The vulnerabilities are collectively rated as Important by Red Hat, though no CVSS base score is provided. The update includes fixes delivered via updated container images and a Z-Stream release. The advisory references CWE-770, which relates to allocation of resources without limits or throttling. No known exploits in the wild have been reported. The vendor advisory does not explicitly state patch availability but the update itself is the remediation.

The vulnerabilities affect Red Hat Multicluster Global Hub 1.4.5 and could potentially impact the security of cluster management operations. The exact impact details are not specified beyond the Important severity rating. There are no known exploits in the wild. The vulnerabilities relate to resource management issues (CWE-770), which could lead to denial of service or other resource exhaustion conditions if exploited.

Red Hat has released Multicluster Global Hub version 1.4.5 as a security update containing fixes for the identified vulnerabilities. Users should upgrade to this version to remediate the issues. The vendor advisory indicates this update is the official fix. No additional mitigations or temporary workarounds are specified. Patch status is confirmed by the availability of the updated version 1.4.5.