The advisory covers a medium severity security update for Red Hat Advanced Cluster Security for Kubernetes 4.8, fixing two vulnerabilities identified as CVE-2025-9648 and CVE-2025-47907. The fixes address issues including database connection exhaustion triggered by policy category name filling and system panics caused by unknown messages from sensors. The update is delivered as new container images and software versions for affected architectures including ppc64le, amd64, arm64, and s390x. The vendor recommends upgrading to the updated RHACS 4.8.6 release to apply these security and bug fixes.

The vulnerabilities could lead to resource exhaustion (database connection exhaustion) and system instability (central component panics) within the RHACS environment, potentially affecting the availability and reliability of Kubernetes security management. The advisory rates the severity as medium and no active exploitation has been reported.

Red Hat advises users running earlier versions of RHACS to upgrade to version 4.8.6 to apply the security patches and bug fixes. Since this is a traditional software update (not a cloud service), remediation requires manual upgrade by the user. Patch status is confirmed by the vendor advisory indicating the availability of updated images and software versions.