CVE-2026-16242
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
multicluster engine for Kubernetes 2.1
- Vendor
- Red Hat
- Product
- multicluster engine for Kubernetes 2.1
- Platforms
- Unknown
- Default status
affected- Package
- multicluster-engine/hypershift-rhel9-operator
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784905766 | unaffected | rpm | * | Unavailable | None listed |
multicluster engine for Kubernetes 2.1
- Vendor
- Red Hat
- Product
- multicluster engine for Kubernetes 2.1
- Platforms
- Unknown
- Default status
affected- Package
- multicluster-engine/hypershift-rhel9-operator
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784905766 | unaffected | rpm | * | Unavailable | None listed |
multicluster engine for Kubernetes 2.11
- Vendor
- Red Hat
- Product
- multicluster engine for Kubernetes 2.11
- Platforms
- Unknown
- Default status
affected- Package
- multicluster-engine/hypershift-rhel9-operator
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784945966 | unaffected | rpm | * | Unavailable | None listed |
multicluster engine for Kubernetes 2.17
- Vendor
- Red Hat
- Product
- multicluster engine for Kubernetes 2.17
- Platforms
- Unknown
- Default status
affected- Package
- multicluster-engine/hypershift-rhel9-operator
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784856942 | unaffected | rpm | * | Unavailable | None listed |
multicluster engine for Kubernetes 2.6
- Vendor
- Red Hat
- Product
- multicluster engine for Kubernetes 2.6
- Platforms
- Unknown
- Default status
affected- Package
- multicluster-engine/hypershift-rhel9-operator
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784905804 | unaffected | rpm | * | Unavailable | None listed |
multicluster engine for Kubernetes 2.8
- Vendor
- Red Hat
- Product
- multicluster engine for Kubernetes 2.8
- Platforms
- Unknown
- Default status
affected- Package
- multicluster-engine/hypershift-rhel9-operator
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784905783 | unaffected | rpm | * | Unavailable | None listed |
multicluster engine for Kubernetes 2.9
- Vendor
- Red Hat
- Product
- multicluster engine for Kubernetes 2.9
- Platforms
- Unknown
- Default status
affected- Package
- multicluster-engine/hypershift-rhel9-operator
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784905769 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.14
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.14
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel8
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1787001690 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.15
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.15
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1787055132 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.16
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.16
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1785534428 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.17
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.17
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784914869 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.18
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.18
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784912882 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.19
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.19
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1784913720 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.20
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.20
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1785288843 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.21
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.21
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1785301941 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift Container Platform 4.22
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4.22
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-hypershift-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1785192936 | unaffected | rpm | * | Unavailable | None listed |
Logging Subsystem for Red Hat OpenShift
- Vendor
- Red Hat
- Product
- Logging Subsystem for Red Hat OpenShift
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift-logging/cluster-logging-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Multicluster Engine for Kubernetes
- Vendor
- Red Hat
- Product
- Multicluster Engine for Kubernetes
- Platforms
- Unknown
- Default status
unaffected- Package
- multicluster-engine/cluster-curator-controller-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Multicluster Engine for Kubernetes
- Vendor
- Red Hat
- Product
- Multicluster Engine for Kubernetes
- Platforms
- Unknown
- Default status
unaffected- Package
- multicluster-engine/hypershift-addon-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Multicluster Engine for Kubernetes
- Vendor
- Red Hat
- Product
- Multicluster Engine for Kubernetes
- Platforms
- Unknown
- Default status
unaffected- Package
- multicluster-engine/hypershift-cli-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Multicluster Engine for Kubernetes
- Vendor
- Red Hat
- Product
- Multicluster Engine for Kubernetes
- Platforms
- Unknown
- Default status
unaffected- Package
- multicluster-engine/managedcluster-import-controller-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
OpenShift API for Data Protection
- Vendor
- Red Hat
- Product
- OpenShift API for Data Protection
- Platforms
- Unknown
- Default status
unaffected- Package
- oadp/oadp-hypershift-velero-plugin-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
OpenShift API for Data Protection
- Vendor
- Red Hat
- Product
- OpenShift API for Data Protection
- Platforms
- Unknown
- Default status
unaffected- Package
- oadp/oadp-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
unaffected- Package
- rhacm2/acm-multicluster-observability-addon-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
unaffected- Package
- rhacm2/acm-must-gather-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
unaffected- Package
- rhacm2/endpoint-monitoring-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
unaffected- Package
- rhacm2/grafana-dashboard-loader-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
unaffected- Package
- rhacm2/metrics-collector-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
unaffected- Package
- rhacm2/multicluster-observability-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
unaffected- Package
- rhacm2/rbac-query-proxy-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-aws-ebs-csi-driver-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-aws-efs-csi-driver-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-azure-disk-csi-driver-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-azure-file-csi-driver-operator-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-cluster-network-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-cluster-network-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-cluster-node-tuning-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-cluster-storage-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-csi-driver-manila-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-openstack-cinder-csi-driver-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-powervs-block-csi-driver-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- openshift4/ose-smb-csi-driver-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.