This advisory covers a security and bug fix update for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The affected versions are >=4.10 and <4.11.1. The update addresses multiple issues such as slow alert queries, failures in loading compliance profiles at scale, incorrect authentication test results, and CPU throttling caused by the cert-watcher sidecar. It also includes patches for numerous CVEs, including CVE-2026-9165, among others. The vendor advisory explicitly recommends upgrading to version 4.11.1 to apply these fixes and security patches.

The vulnerabilities and bugs fixed in this update could impact the performance, reliability, and security of RHACS deployments. Specific issues include degraded alert query performance, failure in compliance profile loading, incorrect authentication test results potentially leading to false positives, and CPU resource exhaustion due to sidecar throttling. The security patches address multiple vulnerabilities that could otherwise be exploited to compromise the system. No known exploits are reported in the wild at this time.

Red Hat has released RHACS version 4.11.1 which includes security patches and bug fixes. Users running affected versions (>=4.10 <4.11.1) are advised to upgrade to version 4.11.1 to mitigate these vulnerabilities and issues. No additional mitigation steps are specified or required beyond applying the official update.