CVE-2026-77459

Argo CD (versions 2.10.0 through 3.3.15 , 3.4.10 , 3.5.4 , and 3.6.0-rc2 ) contains a vulnerability where PreDelete and PostDelete resource hooks bypass AppProject destination and resource authorization checks. While standard synchronization checks for namespaces, servers, and allow/deny lists ar...