Red Hat Security Advisory: VolSync v0.16 security fixes and container updates

VolSync v0.16 is a Kubernetes operator enabling asynchronous replication of persistent volumes within or across clusters. Security vulnerabilities identified as CVE-2026-46603 and CVE-2026-84445 affect this component, impacting Red Hat Advanced Cluster Management for Kubernetes versions up to and including 0.32.14-r1. Red Hat has issued security fixes and updated container images to remediate these issues. The vulnerabilities are rated with an important security impact by Red Hat Product Security. The advisory references updated images for multiple architectures and provides links to official documentation and advisories.

The vulnerabilities in VolSync v0.16 could potentially affect the integrity or availability of persistent volume replication in Kubernetes clusters managed by Red Hat Advanced Cluster Management. The security impact is rated as important by Red Hat, indicating a significant but not critical risk. There are no known exploits in the wild currently. The issues could affect data replication reliability or security if left unpatched.

Red Hat has released patches and updated container images for VolSync v0.16 as part of Red Hat Advanced Cluster Management for Kubernetes. Users should apply these official updates to remediate the vulnerabilities. The vendor advisory confirms that fixes are available and provides updated images for multiple architectures. No additional mitigation steps beyond applying the official patches and updated images are indicated.