Skip to content
Threat Feed
Subscribe

Product

OpenShift GitOps Operator

1 brief RSS
medium threat

OpenShift GitOps Operator Vulnerability Allows Denial of Service via ClusterRole Name Collision

A high-severity denial of service vulnerability, identified as CVE-2026-14251, exists in the OpenShift GitOps operator where a namespace-scoped Argo CD instance can trigger the deletion of a cluster-scoped Argo CD instance's ClusterRole by exploiting a name collision due to improper resource ownership validation.

exploited OpenShift GitOps operator +1 openshift kubernetes gitops denial-of-service vulnerability
1t 1c