VDB
RHSA-2026:52857
RHSA-2026:52857
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy malicious Kubernetes resources to managed clusters, potentially resulting in complete cluster compromise.
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64 as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | Red Hat OpenShift GitOps | |
| Red Hat | registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64 as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64 as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64 as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64 as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64 as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64 as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64 as a component of Red Hat OpenShift GitOps 1.19 | * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le as a component of Red Hat OpenShift GitOps 1.19 | * |
…and 28 more
Timeline
- Aug 10, 2026 CVE Published
- Sep 30, 2026 CVE Updated
- Sep 30, 2026 Distribution Patch
- Sep 30, 2026 Distribution Patch
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:52857 advisory
- https://access.redhat.com/security/cve/CVE-2026-15416 advisory
- https://access.redhat.com/security/cve/CVE-2026-25681 advisory
- https://access.redhat.com/security/cve/CVE-2026-27136 advisory
- https://access.redhat.com/security/cve/CVE-2026-39828 advisory
- https://access.redhat.com/security/cve/CVE-2026-39829 advisory
- https://access.redhat.com/security/cve/CVE-2026-39830 advisory
- https://access.redhat.com/security/cve/CVE-2026-39831 advisory
- https://access.redhat.com/security/cve/CVE-2026-39832 advisory
- https://access.redhat.com/security/cve/CVE-2026-39835 advisory
- https://access.redhat.com/security/cve/CVE-2026-39836 advisory
- https://access.redhat.com/security/cve/CVE-2026-42508 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52857.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2496732 issue
- https://www.cve.org/CVERecord?id=CVE-2026-15416 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-15416 advisory
- https://github.com/argoproj/argo-helm/commit/0f245ab advisory
- https://github.com/argoproj/argo-helm/security/advisories/GHSA-47m3-95c7-g2g8 advisory
…and 67 more