Red Hat multicluster engine for Kubernetes 2.7

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-7163fixed in 1777205801Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosureMEDIUM 6.10.2 %
CVE-2025-7195Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwdMEDIUM 6.40.2 %