Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.4 security update

Red Hat Advanced Cluster Management for Kubernetes provides centralized management of Kubernetes clusters and applications across cloud environments. The security advisory for version 2.16.4 addresses multiple vulnerabilities identified by various CVEs including CVE-2026-10090 and others. The update includes new features, enhancements, bug fixes, and updated container images. The advisory does not specify individual vulnerability details or CVSS scores but rates the update as important. The vendor advisory recommends applying this update following the application of all prior relevant errata.

The vulnerabilities addressed in this update have been rated with an important security impact by Red Hat Product Security. While no specific CVSS scores are provided, the severity is considered high. These vulnerabilities could potentially affect the security posture of Kubernetes cluster management, possibly impacting confidentiality, integrity, or availability depending on the specific CVEs involved. No known exploits in the wild have been reported at this time.

Red Hat has released updated container images as part of the v2.16.4 update for Advanced Cluster Management for Kubernetes. Users should apply this update to remediate the identified vulnerabilities. Before applying this update, ensure that all previously released relevant errata are applied. Detailed update instructions are available from Red Hat's official documentation. No indication of temporary workarounds or no-action-required status is provided, so applying the official update is the recommended mitigation.