Red Hat Security Advisory: Red Hat Connectivity Link component - rhcl-operator security update

This advisory addresses a security update for Red Hat Connectivity Link version 1.4, specifically targeting the rhcl-operator component. The update is rated as Important by Red Hat Product Security and is associated with CVE-2026-108334. The update introduces new container images including rhcl-1/wasm-shim-rhel9, rhcl-1/rhcl-console-plugin, rhcl-1/rhcl-operator, and rhcl-1/rhcl-operator-bundle, which are now available in the Red Hat container registry. The advisory does not specify detailed vulnerability mechanics or affected versions but emphasizes the importance of updating to these new images to mitigate the security risk.

The security impact is rated Important by Red Hat Product Security, indicating a significant risk that could affect the confidentiality, integrity, or availability of the Red Hat Connectivity Link component. No known exploits in the wild have been reported. The update is intended to secure application traffic management in hybrid and multicloud environments, reducing potential attack surfaces related to the rhcl-operator and associated components.

Red Hat has released updated container images for the Red Hat Connectivity Link 1.4 component, including the rhcl-operator and related plugins. Users should pull and deploy the updated container images from the Red Hat container registry using the provided podman pull commands. Since this is an official security update, applying these updated images is the recommended remediation. Patch status is confirmed by the vendor advisory. No additional mitigations or workarounds are specified.