SB2026102656 - Multiple vulnerabilities in Red Hat OpenShift GitOps 1.21
Published: October 26, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 2 vulnerabilities.
1) Link following (CVE-ID: CVE-2026-71556)
CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to modify files outside the intended worktree path.
The vulnerability exists due to improper link resolution before file access in the worktree filesystem wrapper when performing worktree file operations on attacker-controlled symbolic link paths. A remote attacker can introduce a symbolic link in the worktree and cause the application to perform a write through that path to modify files outside the intended worktree path.
User interaction is required, and exploitation requires the attacker to be able to introduce or control a symbolic link in the worktree.
2) Inefficient Algorithmic Complexity (CVE-ID: CVE-2026-84375)
CWE-ID: CWE-407 - Inefficient Algorithmic Complexity
CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to inefficient algorithmic complexity in the js-yaml YAML loader when processing a crafted YAML document containing repeated merges of empty mappings. A remote attacker can submit a crafted YAML document to cause a denial of service.
In versions 3 and 4, merge support is enabled by default.
Remediation
Install update from vendor's website.