CLEANSTART-2026-LD90473: Security fix for GHSA-8wmf-6v46-5gfg applied in: argo-cd 3.5.6-r2
Security vulnerability affects the argo-cd package. This issue is resolved in later releases. See references for vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/argo-cdto a version that resolves this vulnerability.Fixed in 3.5.6-r2 - Upgrade
Upgrade
argo-cdto a version that resolves this vulnerability.Fixed in 3.5.6-r2Patch GHSA-8wmf-6v46-5gfg
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vector indicates local access, low attack complexity, and low privileges are required. No user interaction is required, but the attack depends on a prerequisite condition (AT:P).
What is the impact if exploited?
The listed impact is limited to low confidentiality impact. Integrity, availability, and subsequent-system confidentiality, integrity, and availability impacts are listed as none.
Which package release contains the security fix?
The security fix is applied in argo-cd version 3.5.6-r2. The advisory states that later releases also resolve the issue.