Critical 9.1Published Dec 15, 2025

CVE-2025-13888Openshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobs

Updated under an hour ago (Oct 27, 2026, 7:40 PM ET)

Does this affect you?

It affects redhat-developer gitops-operator and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for redhat-developer gitops-operator

Exploited in the last 30 days

A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged workloads that run on master nodes, effectively giving them root access to the entire cluster.

CVSS: 9.1 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-266
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: redhat
NVD analysis: Deferred
Record last updated: Jan 22, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

redhat-developer gitops-operator redhat_developer:gitops_operator (from the name)	before 1.16.2	CNA record
Red Hat Red Hat OpenShift GitOps 1.16 redhat:openshift_gitops	from sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa not affected	CNA record

References

References

https://access.redhat.com/errata/RHSA-2025:23203	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2025:23206	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2025:23207	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2026:1017	vendor-advisory, x-refsource-redhat
https://access.redhat.com/security/cve/CVE-2025-13888	vdb-entry, x-refsource-redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2418361	issue-tracking, x-refsource-redhat
https://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef
https://github.com/redhat-developer/gitops-operator/pull/897
https://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.