Description
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| argoproj | Argo CD | 3.2.0 – < 3.2.11, 3.3.0 – < 3.3.9 | 3.2.11 |
High · 7.7
CVE-2026-43824
EUVD-2026-26726GHSA-c7mp-5hg2-gfh8
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
Published May 2, 2026 · Updated Jul 15, 2026 · Assigned by mitre