CVE-2025-49844

[arjunprasad2143]

https://access.redhat.com/security/cve/cve-2025-49844

The gitops operator has a redis component which is vulnerable. Do you have plans to fix this as soon as possible?

[svghadi]

Yes. We are working on a fix. The Redis instance used by Argo CD already has network policies and authentication enabled as per recommended mitigations, so the overall impact of this CVE should be minimal.