Red Hat OpenShift GitOps 1.16 vulnerabilities

2 known vulnerabilities in Red Hat OpenShift GitOps 1.16 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  gitops-operator: Incorrect Privilege Assignment

  CVE-2025-13888Dec 15, 2025Redhat-developer

  A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these ele

• 8.2 High severity

  Red Hat OpenShift GitOps 1.14: Exposure of Resource to Wrong Sphere

  CVE-2024-13484Jan 28, 2025Red Hat

  A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on t