214 matches found
EUVD-2026-57058
A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...
CVE-2026-72526
A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...
CVE-2026-72526 Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation
A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...
CVE-2026-70398
A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...
PT-2026-70970
Name of the Vulnerable Software and Affected Versions multicloud-integrations affected versions not specified Description A flaw exists in the multicloud-integrations component where the Application propagation controller fails to properly validate the ocm-managed-cluster annotation within an...
PT-2026-70969
Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management affected versions not specified Description A flaw in the multicloud-integrations component allows an authenticated tenant to manipulate the GitOpsCluster controller. An attacker can redirect sensitive spoke...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.1 security update
Important: Red Hat OpenShift GitOps v1.21.1 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10083 RC 1.21.0-7: Missing permission for web-based terminal in Argocd UI GITOPS-10178 OpenShift GitOps operator v1.21.0 breaks Redis-HA...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: upwind-agent, gitlab-rails-ce, vitess, knative-serving-fips, etcd-fips, omnictl-multiarch-fips, cilium-cli, argo-workflows, kube-conformance, traefik-fips, gitlab-workhorse-ce-fips, kyverno, skaffold, k3s, argo-cd-fips, istio, flux-fips, backup-restore-operator,...
GHSA-VGWF-H737-FF37 vulnerabilities
Vulnerabilities for packages: upwind-agent, podman-fips, gitlab-rails-ce, vitess, knative-serving-fips, longhorn-cli, etcd-fips, omnictl-multiarch-fips, gitlab-runner-fips, longhorn-manager-fips, buildkitd, cilium-cli, argo-workflows, docker-cli-buildx-fips, kube-conformance, traefik-fips,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: flux-operator, slsa-verifier, terraform-provider-tls, upwind-agent, neuvector-sigstore-interface-fips, podman-fips, k8sgpt, terraform-provider-azurerm-fips, gitlab-rails-ce, vitess, knative-serving-fips, etcd-fips, omnictl-multiarch-fips, hcloud,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: upwind-agent, gitlab-rails-ce, vitess, knative-serving-fips, etcd-fips, omnictl-multiarch-fips, cilium-cli, argo-workflows, kube-conformance, traefik-fips, gitlab-workhorse-ce-fips, kyverno, skaffold, k3s, argo-cd-fips, istio, flux-fips, backup-restore-operator,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: flux-operator, slsa-verifier, terraform-provider-tls, upwind-agent, neuvector-sigstore-interface-fips, podman-fips, k8sgpt, terraform-provider-azurerm-fips, gitlab-rails-ce, vitess, knative-serving-fips, etcd-fips, omnictl-multiarch-fips, hcloud,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: upwind-agent, podman-fips, gitlab-rails-ce, vitess, knative-serving-fips, etcd-fips, omnictl-multiarch-fips, cilium-cli, argo-workflows, kube-conformance, traefik-fips, gitlab-workhorse-ce-fips, kyverno, pulumi-language-yaml, skaffold, packer-fips, k3s, nuclei,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: upwind-agent, podman-fips, gitlab-rails-ce, vitess, knative-serving-fips, longhorn-cli, etcd-fips, omnictl-multiarch-fips, gitlab-runner-fips, longhorn-manager-fips, buildkitd, cilium-cli, argo-workflows, docker-cli-buildx-fips, kube-conformance, traefik-fips,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-storage, cilium, splunk-otel-collector, ksops, docker-machine-driver-harvester, melange, flux-kustomize-controller, containerd, wolfictl, gomplate, step-issuer, k8sgpt, openbao, osv-scanner, kots, falco-no-driver, falcoctl, docker, guac,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-storage, crossplane-provider-keycloak, cilium, crossplane-provider-aws-kms, splunk-otel-collector, cloudflared, ksops, melange, flux-kustomize-controller, containerd, wolfictl, gomplate, step-issuer, k8sgpt, sealed-secrets, openbao,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: zarf, kaf, cilium, kubescape, telegraf, cilium-cli, nerdctl, cloud-provider-aws, helm, k3s, aactl, kine, external-secrets-operator, containerd, prometheus, kubernetes-dashboard, zot, kubernetes, snyk-cli, minio, kots, osv-scanner, falco-no-driver, mattermost,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: zarf, kaf, argo-events, cilium, kubescape, opentofu, cilium-cli, dagger, nerdctl, act, chezmoi, cloud-provider-aws, splunk-otel-collector, telegraf, helm, gptscript, trivy, k3s, aactl, argo-cd, kine, melange, apko, external-secrets-operator, containerd, prometheus,...
GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...