by Kastro
Paper/Archive/CVE-2026-43824

CVE-2026-43824

argoproj Argo CD — In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

EPSS 0.3%public exploitCVSS 9.6
critical.is priorityof 100
43
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 19.1.191 × 203.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

Affected

ProductAffectedFixed inSource
Argo CD3.2.0 – < 3.2.113.2.11CNA
Argo CD3.3.0 – < 3.3.93.3.9CNA
Red Hat Openshift Data Foundation 4see advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP
Red Hat OpenShift GitOpssee advisory–redhat-SADP

Scores by source

redhat-SADP (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
mitre (CNA)7.7CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

exploitgithub.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3refaccess.redhat.com/security/cve/CVE-2026-43824refbugzilla.redhat.com/show_bug.cgi?id=2464613refsecurity.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43824.json