Go/github.com/redhat-developer/gitops-operator CVE-2025-13888: critical 9.1, EPSS 0.69%
OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources in github.com/redhat-developer/gitops-operator
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-4242
- nvd: CVE-2025-13888
- https://github.com/advisories/GHSA-pcqx-8qww-7f4v
- https://access.redhat.com/errata/RHSA-2025:23203
- https://access.redhat.com/errata/RHSA-2025:23206
- https://access.redhat.com/errata/RHSA-2025:23207
- https://access.redhat.com/security/cve/CVE-2025-13888
- https://bugzilla.redhat.com/show_bug.cgi?id=2418361
CVE-2025-13888 · published · modified · JSON