جزئیات آسیب‌پذیری

A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy malicious Kubernetes resources to managed clusters, potentially resulting in complete cluster compromise.

• https://access.redhat.com/errata/RHSA-2026:52857 vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/security/cve/CVE-2026-15416 vdb-entryx_refsource_REDHAT
• https://bugzilla.redhat.com/show_bug.cgi?id=2496732 issue-trackingx_refsource_REDHAT
• https://github.com/argoproj/argo-helm/commit/0f245ab
• https://github.com/argoproj/argo-helm/security/advisories/GHSA-47m3-95c7-g2g8
• https://thehackernews.com/2026/07/unpatched-argo-cd-repo-server-flaw.html
• https://www.synacktiv.com/en/publications/caught-in-the-octopus-trap-unauthenticated-rce-in-argo-cd-with-codeql