CVE-2026-43824

HighCVSS 7.7/10Last modified Oct 26, 2026

Description

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-212 CWE-312

Affected software

Vendor	Product	Versions
argoproj	Argo CD	>= 3.2.0, < 3.2.11; >= 3.3.0, < 3.3.9
Red Hat	Red Hat Openshift Data Foundation 4	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—
Red Hat	Red Hat OpenShift GitOps	—

References

Timeline

Published: May 2, 2026
Last modified: Oct 26, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-438257.3Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 (libsvm document categorization module CVE-2026-438266.5The OpenSearch logging provider, when configured with a `host` URL that embeds credentials (for example `https://user:password@server.exampl CVE-2026-438276.5Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-CVE-2026-438286.5Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shir CVE-2026-438297.5A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution CVE-2026-438309.8A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.CVE-2026-438317.5A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code executi CVE-2026-438327.5A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution CVE-2026-438335.3A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.CVE-2026-438347.5A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executi CVE-2026-438358.6A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potent CVE-2026-438369.3A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.