GO-2025-4242
NoneCVSS
—
EPSS
—
Published
Dec 22, 2025
CISA due date
—
The record
OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources in github.com/redhat-developer/gitops-operator
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/redhat-developer/gitops-operator | 0 | No fix |
| Go | github.com/redhat-developer/gitops-operator | 0 | 1.16.2 |