Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.4 security update

Red Hat Advanced Cluster Management for Kubernetes provides centralized management of Kubernetes clusters and applications across cloud environments. The security advisory for version 2.14.4 addresses multiple vulnerabilities identified by various CVEs including CVE-2026-10090 and others. The update delivers security fixes, bug fixes, and updated container images to mitigate these issues. The vendor rates the security impact as important but does not provide a CVSS score. No known exploits in the wild have been reported. The advisory recommends applying the update after prior errata are installed.

The vulnerabilities affect Red Hat Advanced Cluster Management for Kubernetes versions 2.14.0 through 2.14.4 and could potentially allow attackers to exploit security weaknesses in the product. The vendor rates the impact as important (high severity). No active exploitation has been reported. The update addresses multiple CVEs covering a range of weaknesses.

Apply the Red Hat Advanced Cluster Management for Kubernetes v2.14.4 update after ensuring all previously released relevant errata are applied. Follow Red Hat's official guidance for applying updates as detailed in their documentation. No additional mitigation steps are specified beyond applying this update.