CVE-2026-43824

In Argo CD versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9 , a missing authorization and data-masking gap in the ServerSideDiff endpoint allows an attacker with read-only access to extract plaintext Kubernetes Secret data from etcd. The vulnerability stems from the use of the Kubernetes...

CVE-2026-43824

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data...