Red Hat Security Advisory

RHSA-2025:17730

Red Hat OpenShift GitOps v1.16.4 security update

Released 2025-10-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.16 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel9 +3

TI-2025-37068 CVE-2025-59538 · GHSA-gpx4-37g2-c8pv

HIGH 72

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09364 Published 2025-10-01 Partial fix · 2.14.20, 3.2.0-rc2 +2 CWE-248

TI-2025-37067 CVE-2025-59537 · GHSA-wp4p-9pxh-cgx2

HIGH 72

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2025-10-01 Partial fix · 2.14.20, 3.2.0-rc2 +2 CWE-20

TI-2025-37062 CVE-2025-59531 · GHSA-f9gq-prrc-hrhc

HIGH 72

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00588 Published 2025-10-01 Fixed in 2.14.20, 3.2.0-rc2 +2 CWE-703

TI-2025-16746 CVE-2025-22874 · GHSA-6f52-wpx2-hvf2

LOW 39

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00376 Published 2025-06-11 Partial fix · 1.24.4

TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3

LOW 31

Cancelling a query (e.g.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00406 Published 2025-08-07 Partial fix · 1.23.12, 1.24.6 CWE-362

TI-2025-34867 CVE-2025-55191 · GHSA-g88p-r42r-ppp9

LOW 29

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00483 Published 2025-09-30 Partial fix · 2.14.20, 3.1.8 +2 CWE-362