PT-2026-36558 · Argo Cd · Argo Cd

Published 2026-05-02 · Updated 2026-05-02 · CVE-2026-43824

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Argo CD versions 3.2.0 through 3.2.10 Argo CD versions 3.3.0 through 3.3.8

Description ServerSideDiff allows the reading of cleartext Kubernetes Secret data.

Recommendations Update versions 3.2.0 through 3.2.10 to 3.2.11. Update versions 3.3.0 through 3.3.8 to 3.3.9.

Fix

Weakness Enumeration

CWE-212

Related Identifiers

CVE-2026-43824

Affected Products

Argo Cd

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-43824 · Security Note
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3 · Note
• https://twitter.com/KaitanSecurity/status/2050402401169940725 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2050407450075971874 · Twitter Post
• https://twitter.com/infoflowcloud/status/2050436586035171344 · Twitter Post
• https://twitter.com/CVEnew/status/2050434978060611841 · Twitter Post