Unpatched Argo CD Repo-Server Flaw Enables Full Kubernetes Cluster Takeover
An unpatched vulnerability in the Argo CD repo-server component allows unauthenticated attackers to execute arbitrary code and potentially take over Kubernetes clusters.…
Tag: Argo CD
CVE-2024-31989: Argo CD Redis Cache Poisoning Vulnerability
A vulnerability in Argo CD where the Redis cache lacked authentication, allowing any pod in the cluster to poison deployment data. Fixed…
CVE-2025-55190: Argo CD API Token Credential Exposure
A flaw in Argo CD where an API token with basic read access could retrieve Git repository credentials from a project. Patched…
CVE-2026-42880: Argo CD Read-Only User Secret Exposure
A vulnerability in Argo CD allowing read-only users to read plaintext Kubernetes secrets. Patched in May 2026.
Synacktiv: Cybersecurity Research Firm
A cybersecurity research firm that discovered the unpatched Argo CD repo-server flaw. They reported it in January 2025 and published details after…
Argo CD: Kubernetes Deployment Tool
A popular GitOps tool for deploying applications to Kubernetes clusters. It uses a repo-server component to read Git repositories and generate Kubernetes…