CVE-2026-7163 | Red Hat Multicluster Engine for Kubernetes Credentials Download Endpoint credentials InfraEnvStatus.ISODownloadURL cleartext storage

April 30, 2026 Yanac

A vulnerability marked as problematic has been reported in Red Hat Multicluster Engine for Kubernetes. The impacted element is the function InfraEnvStatus.ISODownloadURL of the file /v2/clusters/{cluster_id}/credentials of the component Credentials Download Endpoint. This manipulation causes cleartext storage of sensitive information.

This vulnerability is handled as CVE-2026-7163. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More