POC_CVE-2026-42880

CVE-2026-42880 — 通过 ServerSideDiff 泄露 ArgoCD Secret 一个用于复现和检测 CVE-2026-42880 的实验室环境。该漏洞是 Argo CD 中的一个严重漏洞，其 ServerSideDiff gRPC 处理器会将 Kubernetes Secret 数据暴露给只读用户。 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-42880 GHSA| GHSA-3v3m-wc6v-x4x3 CVSS| 9.6（严重） — AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N 受影响版本| ArgoCD...

GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...

CVE-2026-43824

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data...

CVE-2026-43824

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data...