CVE-2026-43824
Full vulnerability record from the local CVENow database.
Description
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
Severity
HIGH
CVSS score
7.7
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2026-05-02 02:16:00.747000
Last modified
2026-10-26 20:10:00.160000
View original CVE JSON
{
"id": "CVE-2026-43824",
"sourceIdentifier": "[email protected]",
"published": "2026-05-02T02:16:00.747",
"lastModified": "2026-10-26T20:10:00.160",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data."
},
{
"lang": "es",
"value": "En Argo CD 3.2.0 anterior a 3.2.11 y 3.3.0 anterior a 3.3.9, ServerSideDiff permite la lectura de datos de Secretos de Kubernetes en texto claro."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "argoproj",
"product": "Argo CD",
"defaultStatus": "unaffected",
"versions": [
{
"version": "3.2.0",
"lessThan": "3.2.11",
"versionType": "semver",
"status": "affected"
},
{
"version": "3.3.0",
"lessThan": "3.3.9",
"versionType": "semver",
"status": "affected"
}
]
}
]
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"affectedData": [
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/argocd-agent-rhel8",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/argocd-agent-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/argocd-image-updater-rhel8",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/argocd-image-updater-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/argocd-rhel8",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/argocd-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/gitops-rhel8",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/gitops-rhel8-operator",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/gitops-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift GitOps",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-gitops-1/gitops-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 4.0
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 5.8
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-04T13:32:13.742342Z",
"id": "CVE-2026-43824",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-212"
}
]
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
}
],
"references": [
{
"url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2026-43824",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464613",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43824.json",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
}
]
}