This security advisory for Red Hat OpenShift GitOps v1.19.4 addresses a set of vulnerabilities including CVE-2026-4800 and others (CVE-2026-32281, CVE-2026-33186, CVE-2026-33487, CVE-2026-42880). A notable fix involves removing the Service-CA annotation from the argocd-server Service that was incorrectly persisted during the upgrade path from v1.12.3 to v1.12.4 and later versions. The update is intended to correct this and other security issues. The advisory does not provide a CVSS score but classifies the severity as high. No exploits in the wild are known at this time.

The vulnerabilities fixed by this update potentially affect the security posture of Red Hat OpenShift GitOps installations, particularly those running affected versions where the Service-CA annotation issue persisted. The impact includes potential security weaknesses related to the identified CVEs. However, no active exploitation has been reported.

A security update to Red Hat OpenShift GitOps version 1.19.4 is available and should be applied. Before applying this update, ensure all previously released errata relevant to your system have been installed. Follow Red Hat's official guidance for applying updates as detailed in their documentation. No additional mitigation steps are indicated by the vendor advisory.