7.7
High
CVE-2026-43824 In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data
Description
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Argo CD 3.3 | 3.3.0 → < 3.3.9 | 3.3.9 |
| Argo CD 3.2 | 3.2.0 → < 3.2.11 | 3.2.11 |
| Red Hat OpenShift GitOps | Versions not published | |
| Red Hat Openshift Data Foundation 4 | Versions not published |
References
- github.com github.com
Timeline
- Published
- Last modified