Database/Container, Kubernetes & orchestration
Argo CD: read-only users can extract plaintext Kubernetes Secret data via ServerSideDiff
Impact
Argo CD's ServerSideDiff endpoint misses an authorization check and a data-masking step, so a user with nothing but read access round-trips a Secret through the API server's server-side apply dry-run and reads the plaintext back. Read-only Argo access is the level handed out broadly - to developers, to platform teams, to anyone who wants to see sync status - while Argo itself usually holds cluster-wide privileges to sync manifests everywhere. On a GPU cluster that means registry pull secrets, object store and model registry credentials, cloud keys and scheduler tokens all become readable by an account that was never meant to see them. Scored 9.6 with a scope change.
Who can reach it
An authenticated Argo CD user with read-only permission on at least one application, with network reach to the Argo CD API or UI. No admin role and no direct Kubernetes API access needed.
What to do
Upgrade Argo CD to 3.2.11 or 3.3.9; on OpenShift GitOps take RHSA-2026:20943 / RHSA-2026:20947. That is a rolling restart of the argocd-server deployment - no node drain, no GPU workload impact. Then rotate the Secrets that read-only users could have pulled, since the endpoint leaves no distinguishing trace in normal Argo audit output.
References
Related entries
- Kata Containers: kata-runtime host code execution via an untrusted input pathCVE-2026-50540 · Kata ContainersCritical
- Kyverno: namespaced mutating policy can generate resources into any namespaceCVE-2026-54523 · Kyverno admission controller (NamespacedMutatingPolicy CEL generator library)Critical
- RHACM GitOpsCluster: tenant can redirect spoke cluster bearer tokens into a namespace they controlCVE-2026-70398 · Red Hat Advanced Cluster Management - multicloud-integrations (GitOpsCluster controller)Critical
- Rancher: SAML assertion replay: the ACS handler does not enforce one-time use, so a captured assertion logsCVE-2026-44946 · RancherCritical
- Harbor: Hard-coded default credentials give web UI access to the whole registryCVE-2026-4404 · HarborCritical
- containerd: CRI plugin propagates unvalidated image LABEL values into container configCVE-2026-53488 · containerdCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.