CVE-2026-16242

CRITICAL 9.4

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

CVSS Score

9.4

EPSS Score

0.7%

EPSS Percentile

48th

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.

CWE	CWE-306
Vendor	red hat
Product	multicluster engine for kubernetes 2.1
Published	Jul 20, 2026
Last Updated	Aug 9, 2026

Stay Ahead of the Next One

Get instant alerts for red hat multicluster engine for kubernetes 2.1

Be the first to know when new critical vulnerabilities affecting red hat multicluster engine for kubernetes 2.1 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Affected Versions

Red Hat / multicluster engine for Kubernetes 2.1

All versions affected

Red Hat / multicluster engine for Kubernetes 2.1

All versions affected

Red Hat / multicluster engine for Kubernetes 2.11.0

All versions affected

Red Hat / multicluster engine for Kubernetes 2.17

All versions affected

Red Hat / multicluster engine for Kubernetes 2.6

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9.0

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.17

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.18

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.19

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.2

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.21

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.22

All versions affected

Red Hat / Logging Subsystem for Red Hat OpenShift

All versions affected

Red Hat / Multicluster Engine for Kubernetes

All versions affected

Red Hat / Multicluster Engine for Kubernetes

All versions affected

Red Hat / Multicluster Engine for Kubernetes

All versions affected

Red Hat / Multicluster Engine for Kubernetes

All versions affected

Red Hat / OpenShift API for Data Protection

All versions affected

Red Hat / OpenShift API for Data Protection

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected