diff --git a/pkgs/applications/networking/cluster/rke2/default.nix b/pkgs/applications/networking/cluster/rke2/default.nix
index c31ce510a2d0..2561b2c465c2 100644
--- a/pkgs/applications/networking/cluster/rke2/default.nix
+++ b/pkgs/applications/networking/cluster/rke2/default.nix
@@ -25,13 +25,19 @@ in
     }
   ) extraArgs;
 
-  rke2_testing = common (
-    (import ./testing/versions.nix)
-    // {
-      updateScript = [
-        ./update-script.sh
-        "testing"
-      ];
-    }
-  ) extraArgs;
+  rke2_testing =
+    (common (
+      (import ./testing/versions.nix)
+      // {
+        updateScript = [
+          ./update-script.sh
+          "testing"
+        ];
+      }
+    ) extraArgs).overrideAttrs
+      {
+        meta.knownVulnerabilities = [
+          "The RKE2 testing channel no longer serves releases, this package will not receive updates."
+        ];
+      };
 }