PT-2026-37356 · Argo Cd · Argo Cd

Published 2026-05-06 · Updated 2026-05-06 · CVE-2026-42880

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Argo CD versions 3.2.0 through 3.2.10 Argo CD versions 3.3.0 through 3.3.8

Description Read-only users can extract plaintext Kubernetes secrets through the use of Server-Side Diffs.

Recommendations Update versions 3.2.0 through 3.2.10 to v3.3.9. Update versions 3.3.0 through 3.3.8 to v3.3.9.

Related Identifiers

CVE-2026-42880

Affected Products

Argo Cd

References · 5

• https://twitter.com/the_yellow_fall/status/2051849681362473312 · Twitter Post
• https://twitter.com/Vijaykiran0987/status/2052097709767807048 · Twitter Post
• https://twitter.com/SelvaKtm2/status/2052078137769677283 · Twitter Post
• https://twitter.com/UpwindMDR/status/2052083927393722699 · Twitter Post
• https://twitter.com/cybrsecpath/status/2052076551760753143 · Twitter Post