Red Hat Security Advisory

RHSA-2025:18093

Red Hat OpenShift GitOps v1.18.1 security update

Released 2025-10-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.18 registry.redhat.io/openshift-gitops-1/argocd-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/gitops-operator-bundle

TI-2025-37068 CVE-2025-59538 · GHSA-gpx4-37g2-c8pv

HIGH 72

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09364 Published 2025-10-01 Partial fix · 2.14.20, 3.2.0-rc2 +2 CWE-248

TI-2025-37067 CVE-2025-59537 · GHSA-wp4p-9pxh-cgx2

HIGH 72

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2025-10-01 Partial fix · 2.14.20, 3.2.0-rc2 +2 CWE-20

TI-2025-37062 CVE-2025-59531 · GHSA-f9gq-prrc-hrhc

HIGH 72

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00588 Published 2025-10-01 Fixed in 2.14.20, 3.2.0-rc2 +2 CWE-703

TI-2025-34867 CVE-2025-55191 · GHSA-g88p-r42r-ppp9

LOW 29

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00483 Published 2025-09-30 Partial fix · 2.14.20, 3.1.8 +2 CWE-362