This advisory covers a security and bug fix update for Red Hat Advanced Cluster Security for Kubernetes (RHACS) version 4.9.7. It addresses a total of ten CVEs, including CVE-2025-62718 and nine others from 2026, which relate to various weaknesses categorized under CWEs such as CWE-1289, CWE-1050, CWE-915, CWE-212, CWE-770, and CWE-918. The update resolves issues including inconsistent CVE severity reporting and vulnerabilities identified in the main RHACS components and the roxctl tool. The vendor has released updated container images and recommends upgrading to this version to apply the fixes. No CVSS scores are provided for these CVEs in the advisory.

The vulnerabilities addressed in this update are rated as high severity by Red Hat. They potentially affect the security posture of RHACS installations by exposing them to risks associated with the listed CWEs. However, there are no known exploits in the wild currently reported. The impact includes potential security weaknesses in Kubernetes cluster security management that could be mitigated by applying this update.

Red Hat has released updated images for RHACS 4.9.7 that include security patches and bug fixes. Users running earlier versions of RHACS are advised to upgrade to version 4.9.7 to apply these fixes. Since this is a self-hosted product and not a cloud service, remediation requires manual upgrade by the user. Patch status is confirmed by the vendor advisory, and the update should be applied promptly to mitigate the vulnerabilities.