RHSA-2026:83629CriticalCVSS 9.8

Red Hat Security Advisory: Red Hat OpenShift GitOps CLI tools version 1.22.2

Published
October 15, 2026
Last Modified
October 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-82277 →

📋 Description

CVE-2026-82277 — argo-rollouts: argo-rollouts: Argo Rollouts Dashboard Unauthenticated Mutating Operations

🎯 Affected products30

  • Red Hat OpenShift GitOps 1.22
  • argocd-agentctl-1-22-1.22.2@amd64 as a component of Red Hat OpenShift GitOps 1.22
  • argocd-agentctl-1-22-1.22.2@amd64_darwin as a component of Red Hat OpenShift GitOps 1.22
  • argocd-agentctl-1-22-1.22.2@arm as a component of Red Hat OpenShift GitOps 1.22
  • argocd-agentctl-1-22-1.22.2@arm64 as a component of Red Hat OpenShift GitOps 1.22
  • argocd-agentctl-1-22-1.22.2@arm64_darwin as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@amd64 as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@amd64_darwin as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@amd64_windows as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@arm64 as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@arm64_darwin as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@darwin_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@darwin_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@ppc64le as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@s390x as a component of Red Hat OpenShift GitOps 1.22
  • argocd-cli-1-22-1.22.2@windows_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • gitops-promoter-cli-1-22-1.22.2@amd64 as a component of Red Hat OpenShift GitOps 1.22
  • gitops-promoter-cli-1-22-1.22.2@amd64_darwin as a component of Red Hat OpenShift GitOps 1.22
  • gitops-promoter-cli-1-22-1.22.2@arm64 as a component of Red Hat OpenShift GitOps 1.22
  • gitops-promoter-cli-1-22-1.22.2@arm64_darwin as a component of Red Hat OpenShift GitOps 1.22
  • gitops-promoter-cli-1-22-1.22.2@darwin_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • gitops-promoter-cli-1-22-1.22.2@darwin_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • kubectl-argo-rollouts-cli-1-22-1.22.2@amd64 as a component of Red Hat OpenShift GitOps 1.22
  • kubectl-argo-rollouts-cli-1-22-1.22.2@amd64_darwin as a component of Red Hat OpenShift GitOps 1.22
  • kubectl-argo-rollouts-cli-1-22-1.22.2@amd64_windows as a component of Red Hat OpenShift GitOps 1.22
  • kubectl-argo-rollouts-cli-1-22-1.22.2@arm64 as a component of Red Hat OpenShift GitOps 1.22
  • kubectl-argo-rollouts-cli-1-22-1.22.2@arm64_darwin as a component of Red Hat OpenShift GitOps 1.22
  • kubectl-argo-rollouts-cli-1-22-1.22.2@darwin_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • kubectl-argo-rollouts-cli-1-22-1.22.2@darwin_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • kubectl-argo-rollouts-cli-1-22-1.22.2@windows_amd64 as a component of Red Hat OpenShift GitOps 1.22

✅ Remediation

Red Hat OpenShift GitOps CLI tools version 1.22.2 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. For the Red Hat OpenShift GitOps streams where a fix for the argo-rollouts container has been delivered, users should apply the updated images through their usual update channels.

🔗 References (4)