EUVD-2026-23126
GHSA-mx9c-q7m4-fm97
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
Lifecycle Timeline
3DescriptionCVE.org
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates on applications managed by other tenants. This leads to cross-namespace privilege escalation, impacting application integrity through unauthorized application updates.
AnalysisAI
Privilege escalation in ArgoCD Image Updater allows authenticated low-privileged users in a multi-tenant Red Hat OpenShift GitOps environment to update container images of applications in other namespaces. This cross‑namespace attack bypasses access controls, leading to unauthorized image changes and integrity compromise. No public exploit or active exploitation has been identified, and the EPSS score is very low.
More in Red Hat Openshift Gitops
View allRemote code execution in the Argo CD repo-server component (as shipped in Red Hat OpenShift GitOps and the argoproj argo
Denial of service in Red Hat OpenShift GitOps (Argo CD operator) lets a tenant who controls a namespace-scoped Argo CD i
Same technique Privilege Escalation
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today