Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

RHBA-2026:12433 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceRHBA-2026:12433

RHBA-2026:12433

HIGH7.7

Red Hat Bug Fix Advisory: Red Hat OpenShift GitOps v1.20.3 bug fix and enhancement update

Published Apr 30, 2026

Modified 4 days ago

Details

Details:

An update is now available for Red Hat OpenShift GitOps.

Bug Fix(es) and Enhancement(s):

GITOPS-9699 (CVE-2026-42880 Kubernetes Secret Extraction via ArgoCD ServerSideDiff [gitops-1.20])

References

https://access.redhat.com/errata/RHBA-2026:12433

https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/

https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_12433.json

CVSS Analysis

CVSS v3.1

7.7

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Upstream

Ecosystems

Timeline

PublishedApr 30, 2026

ModifiedMay 11, 2026