CVE-2026-16242

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

CRITICAL 9.4

At a glance

Source: NVD
EPSS: EPSS 0.92 % · percentile 60 (2026-10-28)
State: PUBLISHED
Published: 2026-07-20 07:33 UTC
Updated: 2026-09-14 14:46 UTC
Assigner: redhat
NVD status: Awaiting Analysis

Description

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.

Weaknesses (CWE)

CWE-306 — Missing Authentication for Critical Function

References

Scores

Version	Score	Vector	Scored by
CVSS 3.1	CRITICAL 9.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L	redhat
CVSS 3.1	CRITICAL 9.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L	NVD · secalert@redhat.com (Secondary)

European references

ENISA EUVD · EUVD-2026-45897
GCVE · GCVE-0-2026-16242

Affected products

Product	Versions
Red Hat · multicluster engine for Kubernetes 2.1	unaffected 1784905766 < *
Red Hat · multicluster engine for Kubernetes 2.1	unaffected 1784905766 < *
Red Hat · multicluster engine for Kubernetes 2.11	unaffected 1784945966 < *
Red Hat · multicluster engine for Kubernetes 2.17	unaffected 1784856942 < *
Red Hat · multicluster engine for Kubernetes 2.6	unaffected 1784905804 < *
Red Hat · multicluster engine for Kubernetes 2.8	unaffected 1784905783 < *
Red Hat · multicluster engine for Kubernetes 2.9	unaffected 1784905769 < *
Red Hat · Red Hat OpenShift Container Platform 4.14	unaffected 1787001690 < *
Red Hat · Red Hat OpenShift Container Platform 4.15	unaffected 1787055132 < *
Red Hat · Red Hat OpenShift Container Platform 4.16	unaffected 1785534428 < *
Red Hat · Red Hat OpenShift Container Platform 4.17	unaffected 1784914869 < *
Red Hat · Red Hat OpenShift Container Platform 4.18	unaffected 1784912882 < *
Red Hat · Red Hat OpenShift Container Platform 4.19	unaffected 1784913720 < *
Red Hat · Red Hat OpenShift Container Platform 4.20	unaffected 1785288843 < *
Red Hat · Red Hat OpenShift Container Platform 4.21	unaffected 1785301941 < *
Red Hat · Red Hat OpenShift Container Platform 4.22	unaffected 1785192936 < *
Red Hat · Logging Subsystem for Red Hat OpenShift
Red Hat · Multicluster Engine for Kubernetes
Red Hat · Multicluster Engine for Kubernetes
Red Hat · Multicluster Engine for Kubernetes

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD