Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.11.11 security update

Red Hat Advanced Cluster Management for Kubernetes provides centralized management of Kubernetes clusters across public and private clouds. The security advisory for version 2.11.11 addresses multiple vulnerabilities identified by numerous CVEs including CVE-2026-10090 and others. The update includes security fixes, bug fixes, and updated container images. Red Hat rates the security impact as Important but does not provide detailed CVSS scores in the advisory. The advisory recommends applying this update after ensuring all prior relevant errata are applied. No explicit patch details or exploit information is provided beyond the update release.

The vulnerabilities affect Red Hat Advanced Cluster Management for Kubernetes versions 2.11.0 through 2.11.11 and could potentially impact the security posture of Kubernetes cluster management. The advisory rates the overall security impact as Important (high severity). There is no indication of known exploits in the wild. The vulnerabilities could affect cluster visibility, management, and security policy enforcement if unpatched.

Apply the Red Hat Advanced Cluster Management for Kubernetes v2.11.11 update after confirming all previously released relevant errata are installed. Follow Red Hat's official guidance for applying updates as detailed in their documentation. No additional mitigation steps are specified or required beyond applying the update. Monitor Red Hat's release notes and advisories for further details.