Vulnerabilities
Argo CD Kustomize Flaw Enables Critical RCE on Repo Servers; Patches Available
A flaw in Argo CD allows attackers to run commands on repo servers via crafted Kustomize files, with patches now available for affected versions.
Everything Vuln Post has reported about Kubernetes: 3 stories, newest first. Part of our Vulnerabilities coverage.
A flaw in Argo CD allows attackers to run commands on repo servers via crafted Kustomize files, with patches now available for affected versions.
Version 3.4.2 resolves CVE-2026-15738, which allowed users to intercept traffic via misordered HTTP and gRPC routes on shared gateways.
A critical flaw allows attackers to bypass authorization checks when deleting Argo CD applications, enabling unauthorized resource creation in Kubernetes clusters.