Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-14251— Gitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dos

Quick assessment

Affected
Red Hat Red Hat OpenShift GitOps
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Red Hat OpenShift GitOps是美国Red Hat公司开源的一个自动化部署服务。 Red Hat OpenShift GitOps存在授权问题漏洞，该漏洞源于ClusterRole reconciler未验证资源所有权，可能导致命名空间范围的Argo CD实例通过名称碰撞触发删除集群范围的Argo CD实例所拥有的ClusterRole，从而导致拒绝服务。

CVSS 7.7 · High EPSS 0.39% · P31

Affected Version Matrix 2

VendorProduct Version RangeStatus
Red Hat Red Hat OpenShift GitOps any affected
any affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-14251

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Gitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dos
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD instance can trigger deletion of a ClusterRole owned by a cluster-scoped Argo CD instance by crafting a name collision, resulting in a denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat OpenShift GitOps 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat OpenShift GitOps是美国Red Hat公司开源的一个自动化部署服务。 Red Hat OpenShift GitOps存在授权问题漏洞，该漏洞源于ClusterRole reconciler未验证资源所有权，可能导致命名空间范围的Argo CD实例通过名称碰撞触发删除集群范围的Argo CD实例所拥有的ClusterRole，从而导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat OpenShift GitOps - cpe:/a:redhat:openshift_gitops:1
Red Hat Red Hat OpenShift GitOps - cpe:/a:redhat:openshift_gitops:1

II. Public POCs for CVE-2026-14251

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-14251

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-14251 (2)

Same Patch Batch · Red Hat · 2026-07-15 · 4 CVEs total

CVE-2026-12382 8.2 HIGH Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing
CVE-2026-15809 7.8 HIGH Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
CVE-2026-15779 6.1 MEDIUM Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validatio

IV. Related Vulnerabilities

Same product: Red Hat OpenShift GitOps
Same vendor: Red Hat
Same weakness: CWE-862

V. Comments for CVE-2026-14251

No comments yet

Leave a comment