{"id":"GO-2025-4242","revision":"5f6eb9e787034b7e8d5e35525edaf93c","records":[{"revision":"5f6eb9e787034b7e8d5e35525edaf93c","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4242","aliases":["CVE-2025-13888","GHSA-pcqx-8qww-7f4v"],"title":"OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources in github.com/redhat-developer/gitops-operator","description":"OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources in github.com/redhat-developer/gitops-operator","state":0,"publishedAt":"2025-12-22T18:15:35+00:00","modifiedAt":"2026-03-03T04:57:48.116556+00:00","affected":[{"ecosystem":"Go","name":"github.com/redhat-developer/gitops-operator","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-pcqx-8qww-7f4v","https://nvd.nist.gov/vuln/detail/CVE-2025-13888","https://access.redhat.com/errata/RHSA-2025:23203","https://access.redhat.com/errata/RHSA-2025:23206","https://access.redhat.com/errata/RHSA-2025:23207","https://access.redhat.com/security/cve/CVE-2025-13888","https://bugzilla.redhat.com/show_bug.cgi?id=2418361"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4242","license":"OSV · upstream source license applies","key":"osv:GO-2025-4242","identifiers":["GO-2025-4242","CVE-2025-13888","GHSA-pcqx-8qww-7f4v"]},"retained":false,"historicalAffected":[]}],"coverage":[]}