All news with #argo cd tag

Fri, September 5, 2025

Max Severity Argo CD API Flaw Exposes Repo Credentials

#Security Advisory #Patch #Argo CD #API Security #CI/CD Security

🔒 A critical Argo CD vulnerability (CVE-2025-55190) allows API tokens with even low project-level get permissions to access API endpoints and retrieve repository credentials. Rated CVSS v3 10.0, the flaw bypasses isolation protections and can expose usernames and passwords used to access Git repositories. The issue affects all versions up to 2.13.0 and was fixed in 3.1.2, 3.0.14, 2.14.16, and 2.13.9; administrators should upgrade immediately.