CVE-2024-13484: Red Hat Openshift Gitops 1.14

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.

Affected products

• Red Hat Red Hat Openshift Gitops 1.14: before v1.14.4-1 (fixed in v1.14.4-1)
• Red Hat Red Hat Openshift Gitops 1.15: before v1.15.2-4 (fixed in v1.15.2-4); before v1.15.2-1 (fixed in v1.15.2-1)
• Red Hat Red Hat Openshift Gitops 1.16: before 1.16 (fixed in 1.16)

Published 2025-01-28. Last modified 2026-06-26.