The cert-manager Operator for Red Hat OpenShift extends Kubernetes by adding certificate authorities and certificates as native API resources, facilitating certificate-as-a-service capabilities. A high severity vulnerability identified as CVE-2025-61729 affects this operator version 1.18.1, along with other CVEs (CVE-2025-66471, CVE-2026-21441). The Red Hat advisory RHSA-2026:0981 references these issues but does not provide explicit patch details or fixes. Upgrade procedures depend on the operator's installation approval policy: automatic upgrades occur by default, while manual approval is required if the policy was changed. No known exploits in the wild have been reported.

The vulnerability impacts the cert-manager Operator for Red Hat OpenShift, potentially affecting the security of certificate management within Kubernetes clusters. The severity is rated high, indicating a significant risk if exploited. However, no known active exploitation has been reported. The impact is limited to environments using the affected operator version, potentially allowing attackers to compromise certificate-related operations or resources.

Red Hat advises ensuring all previously released errata relevant to your system are applied before upgrading. If the cert-manager Operator's installation approval policy is set to 'Automatic' (the default), the operator will upgrade automatically with no user action required. For 'Manual' approval policies, administrators must manually approve the upgrade. Users should follow Red Hat's official documentation for upgrading the cert-manager Operator and monitor Red Hat advisories for any future patches or updates. Patch status is not explicitly confirmed; check the vendor advisory for the latest remediation guidance.