Red Hat OpenShift GitOps vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Latest Red Hat OpenShift GitOps vulnerabilities

CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
CVE-2026-14251 — Gitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dos (CVSS 7.7)
CVE-2026-15416 — Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint (CVSS 8.9)
CVE-2026-6388 — Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation (CVSS 9.1)
CVE-2025-11065 — Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure (CVSS 5.3)
CVE-2025-8556 — Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results (CVSS 3.7)
CVE-2024-12401 — Cert-manager: potential dos when parsing specially crafted pem inputs (CVSS 4.4)
CVE-2024-9355 — Golang-fips: golang fips zeroed buffer (CVSS 6.5)
CVE-2023-6717 — Keycloak: xss via assertion consumer service url in saml post-binding flow (CVSS 6.0)
CVE-2024-1394 — Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads (CVSS 7.5)