DeutschShown in its original language — a full translation is planned for a future version.
Argo CD: Mehrere Schwachstellen
view advisory published 2026-10-07
Ein Angreifer kann mehrere Schwachstellen in Argo CD ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen und Zugangsdaten auszulesen, Zugriffsbeschränkungen zu umgehen oder einen Denial of Service zu verursachen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-113709US | — | — | ||
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kust… | ||||
| CVE-2026-113708US | — | — | ||
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from r… | ||||
| CVE-2026-77459US | —OT elevated | — | ||
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without… | ||||
| CVE-2026-55797US | — | — | ||
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command i… | ||||
| CVE-2025-61560US | — | — | ||
A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force at… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-4439-h7jw-5cjj vom 2026-10-07external
- GitHub Security Advisory GHSA-9v9p-x54c-58gc vom 2026-10-07external
- GitHub Security Advisory GHSA-fmxq-cgp8-87wp vom 2026-10-07external
- GitHub Security Advisory GHSA-fw5c-w8rc-j7fx vom 2026-10-07external
- GitHub Security Advisory GHSA-g3ff-q88g-chrj vom 2026-10-07external
- GitHub Security Advisory GHSA-j6cw-g6p4-7hch vom 2026-10-07external
- GitHub Security Advisory GHSA-m3vr-7329-44ww vom 2026-10-07external
- GitHub Security Advisory GHSA-w996-f2wq-x9c6 vom 2026-10-07external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan