Skip to content
Threat Feed
Subscribe

Tag

Gitops

3 briefs RSS
medium threat

OpenShift GitOps Operator Vulnerability Allows Denial of Service via ClusterRole Name Collision

A high-severity denial of service vulnerability, identified as CVE-2026-14251, exists in the OpenShift GitOps operator where a namespace-scoped Argo CD instance can trigger the deletion of a cluster-scoped Argo CD instance's ClusterRole by exploiting a name collision due to improper resource ownership validation.

exploited OpenShift GitOps operator +1 openshift kubernetes gitops denial-of-service vulnerability
1t 1c
high advisory

Unauthenticated Remote Code Execution in Argo CD Repo-Server (CVE-2026-15416)

An unauthenticated remote code execution vulnerability (CVE-2026-15416) exists in Argo CD's repo-server, the GitOps engine used by Red Hat OpenShift GitOps, allowing an attacker with network access to achieve RCE and deploy malicious Kubernetes resources, leading to potential cluster compromise.

Argo CD +3 kubernetes gitops rce cloud vulnerability cve
3t 1c
medium advisory

Red Hat OpenShift GitOps Multiple Vulnerabilities

An anonymous remote attacker can exploit multiple vulnerabilities in Red Hat OpenShift GitOps to manipulate data, misrepresent information, or cause a denial of service.

openshift gitops vulnerability cloud
2r 1t