RHSA-2026:49735: Kiali 2.27.2 for Red Hat OpenShift Service Mesh 3.4

Published Aug 3, 2026

Updated

Kiali 2.27.2 for Red Hat OpenShift Service Mesh 3.4

Other sources

Kiali 2.27.2, for Red Hat OpenShift Service Mesh 3.4, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.Security Fix(es): CVE-2026-49978 openshift-service-mesh/kiali-ossmc-rhel9: DOMPurify: Cross-site scripting vulnerability allows code execution (OSSM-15013) CVE-2026-49978 openshift-service-mesh/kiali-rhel9: DOMPurify: Cross-site scripting vulnerability allows code execution (OSSM-15016) CVE-2026-59877 openshift-service-mesh/kiali-ossmc-rhel9: protobufjs: Denial of Service via crafted .proto schema (OSSM-15029) CVE-2026-59877 openshift-service-mesh/kiali-rhel9: protobufjs: Denial of Service via crafted .proto schema (OSSM-15030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

1 affected component

Red Hat Red Hat OpenShift Service Mesh

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openshift-service-mesh/kiali-ossmc-rhel9 to a version that resolves this vulnerability.
Fixed in 2.27.2Patch OSSM-15013
Upgrade
Upgrade openshift-service-mesh/kiali-rhel9 to a version that resolves this vulnerability.
Fixed in 2.27.2Patch OSSM-15016
Upgrade
Upgrade openshift-service-mesh/kiali-ossmc-rhel9 to a version that resolves this vulnerability.
Fixed in 2.27.2Patch OSSM-15029
Upgrade
Upgrade openshift-service-mesh/kiali-rhel9 to a version that resolves this vulnerability.
Fixed in 2.27.2Patch OSSM-15030

Event History

Aug 3, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·05:11 PM

Data Sourced

via Red Hat·05:11 PM

Severity

Frequently Asked Questions

What is the severity of RHSA-2026:49735?

The severity of RHSA-2026:49735 is high with a score of 7.

How do I fix RHSA-2026:49735?

To fix RHSA-2026:49735, update to Kiali 2.27.2 for Red Hat OpenShift Service Mesh 3.4.

What vulnerabilities are addressed in RHSA-2026:49735?

RHSA-2026:49735 addresses security fixes related to CVE-2026-….

What software is affected by RHSA-2026:49735?

RHSA-2026:49735 affects Kiali 2.27.2 for Red Hat OpenShift Service Mesh 3.4.

When was RHSA-2026:49735 published?

RHSA-2026:49735 was published on August 3, 2026.