Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-43824

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

Description

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

argoproj Argo CD

Default version status: unaffected

  • 3.2.0 to < 3.2.11affected
  • 3.3.0 to < 3.3.9affected

References