Red Hat Security Advisory: Multicluster Global Hub 1.4.8 security update

Red Hat's Multicluster Global Hub 1.4.8 security update addresses multiple vulnerabilities identified by CVE-2026-33376 and others. The product allows importing and managing multiple hub clusters centrally. The advisory rates the security impact as critical and provides updated container images to remediate the issues. The vulnerabilities involve several CWEs including improper input validation and access control weaknesses. The update is part of Red Hat Advanced Cluster Management for Kubernetes documentation and releases.

The vulnerabilities have been rated critical by Red Hat Product Security, indicating a high potential impact on confidentiality, integrity, or availability of the Multicluster Global Hub environment. However, there are no known exploits in the wild currently. The affected component is critical for managing multiple Kubernetes clusters, so exploitation could impact cluster management operations.

Red Hat has released updated container images and security fixes as part of the Multicluster Global Hub 1.4.8 update. Users should apply this official update promptly to remediate the vulnerabilities. Refer to the Red Hat Advanced Cluster Management for Kubernetes documentation for detailed upgrade instructions. No additional mitigation actions are indicated by the vendor advisory.