CVE-2026-16242: Red Hat Logging Subsystem For Red Hat Openshift

Critical severity, CVSS 9.4. EPSS: 0.9% chance of exploitation in the next 30 days.

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.

Affected products

  • Red Hat Logging Subsystem For Red Hat Openshift
  • Red Hat Multicluster Engine For Kubernetes
  • Red Hat Multicluster Engine For Kubernetes 2.1: before 1784905766 (fixed in 1784905766)
  • Red Hat Multicluster Engine For Kubernetes 2.11: before 1784945966 (fixed in 1784945966)
  • Red Hat Multicluster Engine For Kubernetes 2.17: before 1784856942 (fixed in 1784856942)
  • Red Hat Multicluster Engine For Kubernetes 2.6: before 1784905804 (fixed in 1784905804)
  • Red Hat Multicluster Engine For Kubernetes 2.8: before 1784905783 (fixed in 1784905783)
  • Red Hat Multicluster Engine For Kubernetes 2.9: before 1784905769 (fixed in 1784905769)
  • Red Hat Openshift API For Data Protection
  • Red Hat Red Hat Advanced Cluster Management For Kubernetes 2
  • Red Hat Red Hat Openshift Container Platform 4
  • Red Hat Red Hat Openshift Container Platform 4.14: before 1787001690 (fixed in 1787001690)
  • Red Hat Red Hat Openshift Container Platform 4.15: before 1787055132 (fixed in 1787055132)
  • Red Hat Red Hat Openshift Container Platform 4.16: before 1785534428 (fixed in 1785534428)
  • Red Hat Red Hat Openshift Container Platform 4.17: before 1784914869 (fixed in 1784914869)
  • Red Hat Red Hat Openshift Container Platform 4.18: before 1784912882 (fixed in 1784912882)
  • Red Hat Red Hat Openshift Container Platform 4.19: before 1784913720 (fixed in 1784913720)
  • Red Hat Red Hat Openshift Container Platform 4.20: before 1785288843 (fixed in 1785288843)
  • Red Hat Red Hat Openshift Container Platform 4.21: before 1785301941 (fixed in 1785301941)
  • Red Hat Red Hat Openshift Container Platform 4.22: before 1785192936 (fixed in 1785192936)

Published 2026-07-20. Last modified 2026-09-14.