Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update

Red Hat Advanced Cluster Management for Kubernetes provides centralized management of Kubernetes clusters and applications across cloud environments. The 2.17.1 release addresses multiple security vulnerabilities identified in version 2.17.0, including CVE-2026-10090 among others. The update delivers security fixes, bug fixes, and updated container images to mitigate these issues. Red Hat has classified the security impact of this update as Important (high severity). The advisory references multiple CVEs and CWE categories but does not provide detailed technical descriptions or CVSS scores for individual vulnerabilities. The vendor advisory confirms the availability of this update as the remediation.

The vulnerabilities affect Red Hat Advanced Cluster Management for Kubernetes versions >=2.17.0 and <2.17.1. The impact is rated as high severity by Red Hat Product Security, indicating significant security risks if unpatched. The exact nature of the impact is not detailed in the advisory, but the presence of multiple CVEs and CWE categories suggests a broad range of potential security issues. No known exploits in the wild have been reported at this time.

A security update to version 2.17.1 is available and should be applied to remediate the vulnerabilities. Before applying this update, ensure all previously released relevant errata are installed. Follow Red Hat's official guidance for applying updates as detailed in their documentation. No additional mitigation steps are specified or required beyond applying the official update.