Vulnerability details
CVE-2026-43824
Red Hat OpenShift GitOpsargoproj Argo CD
CVSS 3.1
7.7High
Official description
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.7High | 3.1 | CVEProject cvelistV5 (CNA) (mitre) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
| 9.6Critical | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | Red Hat OpenShift GitOps | All | CVEProject cvelistV5 (CNA) |
| argoproj | Argo CD | 3.2.0 ≤ v < 3.2.11 | CVEProject cvelistV5 (CNA) |
| argoproj | Argo CD | 3.3.0 ≤ v < 3.3.9 | CVEProject cvelistV5 (CNA) |
References and advisories
4- https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3
- https://access.redhat.com/security/cve/CVE-2026-43824 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2464613 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43824.json x_sadp-csaf-vex
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-05-02
- Last updated
- 2026-07-15
- State
- Published
- Assigner (CNA)
- mitre
Exploit prediction (EPSS)
0.26%
Probability of exploitation in 30 days
19%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-212Improper Removal of Sensitive Information Before Storage or Transfer
- CWE-312Cleartext Storage of Sensitive Information