Multicluster Global Hub 1.4.9 vulnerabilities

2 known vulnerabilities in Multicluster Global Hub 1.4.9 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  Multicluster Global Hub 1.4.9: Incorrect Authorization

  CVE-2026-66792Aug 17, 2026Red Hat

  A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker t

• 8.5 High severity

  Multicluster Global Hub 1.4.9: Insufficient Verification of Data Authenticity

  CVE-2026-71576Aug 10, 2026Red Hat

  A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can mani