Skip to content
OpenAdvisories

Product · Red Hat

Red Hat OpenShift GitOps

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-6388

    Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation

    A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker c…

    Red Hat Red Hat OpenShift GitOps
  • Critical 9.1
    CVE-2025-13888

    Openshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobs

    A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these el…

    Red Hat redhat-developer Red Hat OpenShift GitOps Red Hat OpenShift GitOps 1.16 Go