RHBA-2026:12433 - Bug Fix Advisory

Topic

Red Hat OpenShift GitOps v1.20.3 bug fix and enhancement update

Description

An update is now available for Red Hat OpenShift GitOps.

Bug Fix(es) and Enhancement(s):

• GITOPS-9699 (CVE-2026-42880 Kubernetes Secret Extraction via ArgoCD ServerSideDiff [gitops-1.20])

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift GitOps

Fixes

• GITOPS-9699 - CVE-2026-42880: Kubernetes Secret Extraction via ArgoCD ServerSideDiff [gitops-1.20]

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3