Skip to content
fr Sign in
9.4 Critical

CVE-2026-16242 A flaw was found in the Konnectivity proxy-server configuration for hosted control planes

Description

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.

Affected products and versions

Product Affected versions Fixed in
Logging Subsystem for Red Hat OpenShift Versions not published
Multicluster Engine for Kubernetes Versions not published
OpenShift API for Data Protection Versions not published
Red Hat Advanced Cluster Management for Kubernetes 2 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
multicluster engine for Kubernetes 2.10 1784905766 earliest → < 1784905766 1784905766
multicluster engine for Kubernetes 2.8 1784905783 earliest → < 1784905783 1784905783
multicluster engine for Kubernetes 2.9 1784905769 earliest → < 1784905769 1784905769
multicluster engine for Kubernetes 2.11 1784945966 earliest → < 1784945966 1784945966
Show the 15 other branches
Product Affected versions Fixed in
multicluster engine for Kubernetes 2.6 1784905804 earliest → < 1784905804 1784905804
multicluster engine for Kubernetes 2.17 1784856942 earliest → < 1784856942 1784856942
multicluster engine for Kubernetes 2.1 1784905766 earliest → < 1784905766 1784905766
multicluster engine for Kubernetes 2.11.0 1784945966 earliest → < 1784945966 1784945966
Red Hat OpenShift Container Platform 4.22 1785192936 earliest → < 1785192936 1785192936
Red Hat OpenShift Container Platform 4.20 1785288843 earliest → < 1785288843 1785288843
Red Hat OpenShift Container Platform 4.21 1785301941 earliest → < 1785301941 1785301941
Red Hat OpenShift Container Platform 4.19 1784913720 earliest → < 1784913720 1784913720
Red Hat OpenShift Container Platform 4.18 1784912882 earliest → < 1784912882 1784912882
Red Hat OpenShift Container Platform 4.17 1784914869 earliest → < 1784914869 1784914869
Red Hat OpenShift Container Platform 4.2 1785288843 earliest → < 1785288843 1785288843
multicluster engine for Kubernetes 2.9.0 1784905769 earliest → < 1784905769 1784905769
Red Hat OpenShift Container Platform 4.16 1785534428 earliest → < 1785534428 1785534428
Red Hat OpenShift Container Platform 4.14 1787001690 earliest → < 1787001690 1787001690
Red Hat OpenShift Container Platform 4.15 1787055132 earliest → < 1787055132 1787055132

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Logging Subsystem for Red Hat OpenShift

The 78 CVEs of Logging Subsystem for Red Hat OpenShift →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Medium CVE-2026-92925 Redis: redis: out-of-bounds read via crafted cluster bus packets 7.1 High CVE-2026-10609 A missing authorization flaw was found in the OpenShift Cluster Logging Operator 6.8 Medium CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Medium
Track this CVE